[
https://issues.apache.org/jira/browse/TS-3465?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14378716#comment-14378716
]
Leif Hedstrom commented on TS-3465:
-----------------------------------
Pretty sure it's proxy.config.admin.user_id. What is it set to on your config?
You are definitely tripping up over trying to run as user "root", from what it
looks like, you are hitting:
{code}
#if !defined(BIG_SECURITY_HOLE) || (BIG_SECURITY_HOLE != 0)
if (getuid() == 0 || geteuid() == 0) {
ink_fatal_die(
"Trafficserver has not been designed to serve pages while\n"
"\trunning as root. There are known race conditions that\n"
"\twill allow any local user to read any file on the system.\n"
"\tIf you still desire to serve pages as root then\n"
"\tadd -DBIG_SECURITY_HOLE to the CFLAGS env variable\n"
"\tand then rebuild the server.\n"
"\tIt is strongly suggested that you instead modify the\n"
"\tproxy.config.admin.user_id directive in your\n"
"\trecords.config file to list a non-root user.\n");
}
#endif
{code}
> ATS 5.2.0 is crashed in cluster mode
> -------------------------------------
>
> Key: TS-3465
> URL: https://issues.apache.org/jira/browse/TS-3465
> Project: Traffic Server
> Issue Type: Bug
> Reporter: Tigran Martirosyan
> Assignee: Leif Hedstrom
> Fix For: sometime
>
>
> Hello ,
> I manage to compile ATS 5.2.0 for ubuntu 14.04 LTS 64bit.
> One of the ATS instances in some unknown surcumstances is being crashed when
> I put nodes in cluster mode.
> How to reproduce.
> ===============
> You have to install 2 ATS on diffierent machines. Put the ATS instances into
> cluster mode and load them with http requests.
> Core dump output
> ==============
> Type "apropos word" to search for commands related to "word"...
> Reading symbols from /usr/lib/debug/usr/bin/traffic_server...done.
> [New LWP 28860]
> [New LWP 28861]
> [Thread debugging using libthread_db enabled]
> Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
> Core was generated by `/usr/bin/traffic_server -M --httpport 8080:fd=7'.
> Program terminated with signal SIGABRT, Aborted.
> #0 0x00002ba38cde6cc9 in __GI_raise (sig=sig@entry=6) at
> ../nptl/sysdeps/unix/sysv/linux/raise.c:56
> 56 ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory.
> (gdb) where
> #0 0x00002ba38cde6cc9 in __GI_raise (sig=sig@entry=6) at
> ../nptl/sysdeps/unix/sysv/linux/raise.c:56
> #1 0x00002ba38cdea218 in __GI_abort () at abort.c:118
> #2 0x00002ba38acea5f9 in ink_die_die_die (retval=retval@entry=1) at
> ink_error.cc:43
> #3 0x00002ba38acea6aa in ink_fatal_va(int, const char *, typedef
> __va_list_tag __va_list_tag *) (return_code=return_code@entry=1, fmt=0x6f6a00
> "",
> ap=ap@entry=0x7fff7665ca18) at ink_error.cc:67
> #4 0x00002ba38acea7d4 in ink_fatal_die (message_format=<optimized out>) at
> ink_error.cc:84
> #5 0x00000000004942a4 in change_uid_gid (user=0x1598340 "root") at
> Main.cc:1330
> #6 main (argv=<optimized out>) at Main.cc:1440
> Temporarly Solution
> =====================
> Now as temporarly solution we disabled cluster mode and put haproxy in front
> of our ATS nodes.
> Regards,
> Tigran Martirosyan
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
