Key Authentication Faailure -- was cfservd coredumps

[Mark . Burgess]

Do you know, I have never seen this here before today. A complete
coincidence, but I believe I see where the problem lies.
This seems to be a threading issue -- a problem of multiple
lookups. Although the reverse lookups are protected by
mutexes, like an idiot I seem to have forgotten to copy
the workspace to thread space.

I am working on a fix and shall let everyone know later today
when a downloadable version will be available.

M


On 20 Aug, Martin A. Brooks wrote:
> Hi Mark,
> 
> At 20:53 19/08/2002 +0200, Mark.Burgess@iu.hio.no wrote:
> 
>>Please try 2.0.4pre from www.cfengine.org, and let me know if it
>>helps.
> 
> I can simplify causing this coredump this even more.
> 
> Start cfservd with -F -d
> On a client machine run cfagent -v -q  you'll see debug trawl on both screens.
> On the client, edit /etc/hosts and add a blatantly false entry for the 
> client at the top of the file. For example "10.4.0.6 foobar"  works nicely 
> for me.
> Re-run cfagent -v -q
> Watch cfservd coredump.
> 
> ---------------------------------------------------
> Socket caller address appears honest (10.4.0.16 matches 10.4.0.16)
> admin1.xxxxx.net: Socket originates from 10.4.0.16=rhupdate.xxxxx.net
> Host ID is rhupdate.xxxxx.net
> User ID seems to be root
> Loaded /var/cfengine/ppkeys/root-10.4.0.16.pub
> A public key was already known from rhupdate.xxxxx.net/::ffff:10.4.0.16 - 
> no trust required
> The public key identity was confirmed as root@rhupdate.xxxxx.net
> admin1.xxxxx.net: Strongly authentication of client 
> rhupdate.xxxxx.net/::ffff:10.4.0.16
> admin1.xxxxx.net: Host rhupdate.xxxxx.net granted access to /etc/hosts
> admin1.xxxxx.net: Host rhupdate.xxxxx.net granted access to /etc/hosts
> admin1.xxxxx.net: Couldn't recv
> admin1.xxxxx.net: recv
> Socket caller address appears honest (10.4.0.16 matches 10.4.0.16)
> admin1.xxxxx.net: Socket originates from 10.4.0.16=foobar.xxxxx.net
> admin1.xxxxx.net: Unable to lookup foobar.xxxxx.net
> admin1.xxxxx.net: getaddrinfo: Undefined error: 0
> Segmentation fault (core dumped)
> ------------------------------------------------------
> 
> Can you confirm that 2.0.4pre fixes this issue?
> 
> 
> Martin A. Brooks
> ----------------------
> Clues Ltd            e: martin@clues.ltd.uk
> 3 Thorpe Crescent    t: +44 (0) 20 8886 4521
> London               f: +44 (0) 20 8523 4519
> E17 5BY              w: http://www.clues.ltd.uk



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Work: +47 22453272            Email:  Mark.Burgess@iu.hio.no
Fax : +47 22453205            WWW  :  http://www.iu.hio.no/~mark
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~