[squid-users] SQUID 4.6 - Kerberos Helper Error - FreeBSD

[Amos Jeffries]

On 22/04/19 8:21 am, Fabricio Ferreira wrote:
> Hello Amos,
> Thanks Much for your help on this.
> 
> I have re-checked all permissions and ownership of the keytab file. Everything looks fine. Same settings I have used before on squid 3.5.x  (0440 - root:proxy  /etc/krb5.keytab)
> Yes, keytab has the "proxy" group set - squid user is part of it.  
> 
> Looking at the stderr log, this is all I see:
> ##########################################
> pid 85392 (negotiate_kerberos_), uid 100: exited on signal 11
> pid 85451 (negotiate_kerberos_), uid 100: exited on signal 11
> pid 85555 (negotiate_kerberos_), uid 100: exited on signal 11
> pid 85710 (negotiate_kerberos_), uid 100: exited on signal 11
> pid 85924 (negotiate_kerberos_), uid 100: exited on signal 11
> pid 18353 (negotiate_kerberos_), uid 100: exited on signal 11
> pid 18452 (negotiate_kerberos_), uid 100: exited on signal 11
> pid 18783 (negotiate_kerberos_), uid 100: exited on signal 11
> pid 19021 (negotiate_kerberos_), uid 100: exited on signal 11
> pid 19294 (negotiate_kerberos_), uid 100: exited on signal 11
> pid 19307 (negotiate_kerberos_), uid 100: exited on signal 11
> pid 19532 (negotiate_kerberos_), uid 100: exited on signal 11
> pid 19591 (negotiate_kerberos_), uid 100: exited on signal 11
> ...
> #####################################################
> Not much uh? 

Progress at least. This signal 11 is a segmentation fault.

Next thing to do is get a backtrace (with symbol names) from that crash.
How to do that is described at
<https://wiki.squid-cache.org/SquidFaq/BugReporting#crashes_and_core_dumps>.
Just use gdb on the helper, not Squid binary.


> I don't see anybody using Kerberos with squid 4.6 on FreeBSD 12 yet, so, I think I am alone for a while.
> Does it worth to report it to the FreeBSD port (squid) maintainer?

Eventually. They will also need the backtrace from the helper to see
what is going wrong.


Do you have multiple Kerberos libraries installed on your machine?
 I know there is a build bug which affects Squid-4 using Kerberos
libraries in custom locations. The fix for that will be in v4.7.

Amos