On May 27, 2011, at 4:28 AM, Jan Just Keijser wrote:
> hi all,
>
> FYI: we just ran into a strange issue with mod_gridsite, delegated proxies
> and globus 4.08 based tools:
>
> A webserver is configured using httpd+mod_gridsite; credentials are delegated
> to the server, the user proxy ends up in /var/www/proxycache
> For a particular user the X509_USER_PROXY env var is set to
> X509_USER_PROXY="/var/www/proxycache/%3A%2FDC%3Dorg%2FDC%3Dterena%2FDC%3Dtcs%2FC%3DNL%2FO%3DNikhef%2FCN%3DCristian%2BCirstea%2Bccristi%40nikhef.nl/0eef8b9abfb4f449/userproxy.pem"
> by mod_gridsite.
> With this setting for the X509_USER_PROXY env var all globus-based tools
> (i.e. most of the glite middleware) segfault (e.g. lfc-ls -l /grid/
> segfaults).
> A second, simpler test is to do
> mkdir /tmp/%s
> export X509_USER_PROXY=/tmp/%s/proxy
> grid-proxy-init
> globus-url-copy gsiftp://.....
>
> the last command will segfault.
>
> After some investigation it turns out that this is an issue deep inside the
> globus libraries, where it feeds the contents of "getenv('X509_USER_PROXY')"
> to an sprintf like function : this function then tries to expand/fill in all
> entries with %<n><LETTER>, causing the segfault.
>
> Is this a known bug? is it fixed in GT5?
This is a new bug report. I've put an issue in jira for this:
http://jira.globus.org/browse/RIC-156
Your analysis seems correct, globus_i_gsi_sysconfig_create_key_string must be
called with a "%s" when using the environment variable value as a parameter.
Joe
