[Opendnssec-user] Follow up on ods-enforcerd segfault

[David Peall]

Ok so I ran it in gdb:

(gdb) run
Starting program: /usr/local/sbin/ods-enforcerd -1 -d
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
[New Thread 0x7ffff5258700 (LWP 17342)]
[Thread 0x7ffff5258700 (LWP 17342) exited]
22:05:39 ERROR: cannot create kmdata file (/opt/nfast/kmdata/local/key_pkcs11_ucdc94a5e38242625f0283dbeab01ffa0a0338c875-18135fcd02d0f7a5b34c45477880561c5114eda5.new): Permission denied
NFKM_recordkey failed 86 13

Seems to be a permission problem obscured.

"adduser opendnssec nfast” seems to have fixed the problem.

Regards
—
David Peall

On 28 May 2014, at 8:05 PM, Jerry Lundström <jerry at opendnssec.org> wrote:

> Hi Mark and David,
> 
> On ons, 2014-05-28 at 14:40 +0200, David Peall wrote:
>>  kernel: [688550.164139] ods-enforcerd[15772]: segfault at 0 ip
>> 00007ffb985ceb14 sp 00007fff31d272e0 error 4 in
>> libcknfast.so[7ffb98525000+1ee000]
> 
> All your reports indicates that the segfault happens in the
> libcknfast.so and since there has been almost no change to the code that
> talks to the HSM, we got no other reports and are not seeing this in our
> test environment it looks more like a problem with Thales then with
> OpenDNSSEC, hopefully your already talking with them about this.
> 
> It would be very good if you can compile OpenDNSSEC with debug symbols
> and then get a detailed backtrace (gdb bt full) from the core dump. This
> will help us narrow down where things went wrong.
> 
> You could also try running your setup with SoftHSM to just verify that
> the platform, OS and setup works.
> 
> Cheers,
> Jerry
> 
> -- 
> Jerry Lundström - OpenDNSSEC Developer
> http://www.opendnssec.org/
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4148 bytes
Desc: not available
URL: <http://lists.opendnssec.org/pipermail/opendnssec-user/attachments/20140528/539b0687/attachment.bin>