Hi Dan,
Do you see any correlation between the crash and the CA of the
client certificate?
Since it is reproducible, can you set '-d 2' and and send the server
logs around the crash?
Also, can you give some more information about the build (OS,
compiler, OpenSSL version)?
Thanks,
Gerri
On 02/18/2011 06:13 PM, Dan Bradley wrote:
> Hello,
>
> We are beginning to use xrootd 3.0.2 in the Wisconsin CMS T2. We are
> experiencing frequent crashes of xrootd during GSI authentication. I
> have pasted the crash message at the end of this email.
>
> Commenting out the following configuration line avoids the crash but
> also avoids doing any authentication:
>
> sec.protocol /usr/lib64 gsi -certdir:/etc/grid-security/certificates
> -cert:/etc/grid-security/xrd/xrdcert.pem
> -key:/etc/grid-security/xrd/xrdkey.pem -crl:3
> -authzfun:libXrdLcmaps.so
> -authzfunparms:--osg,--lcmapscfg,/etc/xrootd/lcmaps.cfg,--loglevel,0
> --gmapopt:2|useglobals
>
> Thanks in advance for any help you can give us.
>
> Cheers,
> --Dan
>
> *** glibc detected *** /usr/bin/xrootd: double free or corruption
> (!prev): 0x00000000052e0110 ***
> ======= Backtrace: =========
> /lib64/libc.so.6[0x2b9e8c6e030f]
> /lib64/libc.so.6(cfree+0x4b)[0x2b9e8c6e076b]
> /lib64/libcrypto.so.6(CRYPTO_free+0x1d)[0x2aaaabfffedd]
> /lib64/libcrypto.so.6(ERR_set_error_data+0x85)[0x2aaaabffd1c5]
> /lib64/libcrypto.so.6(ERR_add_error_data+0x110)[0x2aaaabffd7d0]
> /lib64/libcrypto.so.6(PEM_bytes_read_bio+0x3a5)[0x2aaaabfc4425]
> /lib64/libcrypto.so.6(PEM_read_bio_PrivateKey+0x81)[0x2aaaabfc6031]
> /lib64/libcrypto.so.6(PEM_read_bio_RSAPrivateKey+0xb)[0x2aaaabfc536b]
> /usr/lib64/libXrdCryptossl.so.0(_Z27XrdCryptosslX509ParseBucketP12XrdSutBucketP18XrdCryptoX509Chain+0x343)[0x2aaaab0394d3]
>
> /usr/lib64/libXrdSecgsi.so(_ZN17XrdSecProtocolgsi12ServerDoCertEP12XrdSutBufferPS1_R12XrdOucString+0x2e6)[0x2aaaaae0a596]
>
> /usr/lib64/libXrdSecgsi.so(_ZN17XrdSecProtocolgsi16ParseServerInputEP12XrdSutBufferPS1_R12XrdOucString+0xc5)[0x2aaaaae0b355]
>
> /usr/lib64/libXrdSecgsi.so(_ZN17XrdSecProtocolgsi12AuthenticateEP12XrdSecBufferPS1_P13XrdOucErrInfo+0x37e)[0x2aaaaae0ef6e]
>
> /usr/bin/xrootd(_ZN17XrdXrootdProtocol7do_AuthEv+0xf0)[0x4351b0]
> /usr/bin/xrootd(_ZN7XrdLink4DoItEv+0x20)[0x439da0]
> /usr/bin/xrootd(_ZN12XrdScheduler3RunEv+0xc8)[0x43e7c8]
> /usr/bin/xrootd(_Z15XrdStartWorkingPv+0x9)[0x43e939]
> /usr/bin/xrootd(XrdSysThread_Xeq+0x47)[0x481607]
> /lib64/libpthread.so.0[0x2b9e8b8a573d]
> /lib64/libc.so.6(clone+0x6d)[0x2b9e8c741f6d]
>
--
+--------------------------------------------------------------------------+
Gerardo GANIS CERN, PH Dept, SFT group, CH 1211 Geneve 23
room: 32-RC-017, tel: +41 22 7676439
email: [log in to unmask], fax: +41 22 7669133
+--------------------------------------------------------------------------+
