[OpenAFS] Segfault in bos

[Derek Atkins]

Actually, I think this is the wrong way to install the KeyFile.  IIRC,
if you are using MIT Kerberos (instead of Heimdal) you need to use
asetkey in order to convert from the keytab format generated by ktutil
to the AFS KeyFile format.  I didn't think that ktutill could generate
a KeyFile directly.

-derek

Andrew Klaassen <ak@dkp.com> writes:

> Hi, all.
> 
> I've really no idea what I'm doing - I just installed AFS (and
> Kerberos) a few hours ago - but I thought you might be
> interested in knowing about a segfault I'm seeing when I run bos
> on a Debian unstable box.  Here's the setup and the symptoms;
> let me know if you'd like any more information, or can already
> explain the problem:
> 
> # kadmin
> Authenticating as principal admin/admin@DKP.COM with password.
> Enter password:
> kadmin:  addprinc -randkey afs@DKP.COM
> WARNING: no policy specified for afs@DKP.COM; defaulting to no policy
> Principal "afs@DKP.COM" created.
> kadmin:  ktadd -k /etc/openafs/server/KeyFile -e des-cbc-crc:normal afs@DKP.COM
> Entry for principal afs@DKP.COM with kvno 3, encryption type DES cbc mode with CRC-32 added to keytab WRFILE:/etc/openafs/server/KeyFile.
> 
> # strace -f bosserver 2>&1
> <snip>
> munmap(0x40016000, 4096)                = 0
> stat("/etc/openafs/server/CellServDB", {st_mode=S_IFREG|0644, st_size=9, ...}) = 0
> open("/etc/openafs/server/CellServDB", O_RDONLY) = 4
> fstat(4, {st_mode=S_IFREG|0644, st_size=9, ...}) = 0
> old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40016000
> read(4, ">dkp.com\n", 4096)             = 9
> read(4, "", 4096)                       = 0
> close(4)                                = 0
> munmap(0x40016000, 4096)                = 0
> open("/etc/openafs/server/KeyFile", O_RDONLY) = 4
> read(4, "\5\2\0\0\0%\0\1\0\7DKP.COM\0\3afs\0\0\0\1;:\322\360\3\0"..., 100) = 43
> close(4)                                = 0
> --- SIGSEGV (Segmentation fault) ---
> 
> It's obviously choking on /etc/openafs/server/KeyFile.  Have I
> generated that file correctly?
> 
> Thanks.
> 
> Andrew Klaassen
> 
> _______________________________________________
> OpenAFS-info mailing list
> OpenAFS-info@openafs.org
> https://lists.openafs.org/mailman/listinfo/openafs-info

-- 
       Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory
       Member, MIT Student Information Processing Board  (SIPB)
       URL: http://web.mit.edu/warlord/    PP-ASEL-IA     N1NWH
       warlord@MIT.EDU                        PGP key available