Setting up a new MyProxy (v3.9 12 Jun 2007 PAM OCSP) from VDT 1.8.1 I ran across an annoying segfault issue when running the server to run as a CA, in debug mode.
# myproxy-server -dmax_proxy_lifetime: 43200 seconds
PAM enabled, policy requiredCA enabledmax certificate lifetime: 43200 seconds
using storage directory /var/myproxy
Starting myproxy-server on localhost:7512...
Connection from 127.0.0.1
using trusted certificates directory /opt/vdt/globus/TRUSTED_CA
Authenticated client <anonymous>
applying trusted_retrievers policy
trusted retrievers policy matched
applying authorized_retrievers policy
applying authorized_renewers policy
Program received signal SIGSEGV, Segmentation fault.
Note, the client can connect and only fails once the client responds with their credentials. Using GDB I got the stack trace of the issue:
#0 0x008f3950 in strip_newlines (string=0x901d13 "unknown error\\n") at myproxy_log.c:72
#1 0x008f3a95 in myproxy_log_verror () at myproxy_log.c:141
#2 0x0804ca27 in myproxy_authorize_accept (context=0x9fcc020, attrs=0x9fcc008, client_request=0x9fd70c0, client=0xbfd892e0) at myproxy_server.c:1445
#3 0x0804ae5a in handle_client (attrs=0x9fcc008, context=0x9fcc020) at myproxy_server.c:465
#4 0x0804a932 in main (argc=2, argv=0xbfd897e4) at myproxy_server.c:308
Noting that the exception is in the myproxy\_log\_verror method
, and looking at the myproxy code I found this method is only activated when in debug mode. So, assuming all my config was good I ran the myproxy-server proper and all was good.