Received: from biscayne-one-station.mit.edu (BISCAYNE-ONE-STATION.MIT.EDU [18.7.7.80]) by krbdev.mit.edu (8.9.3p2) with ESMTP id SAA28982; Sun, 18 Dec 2005 18:24:46 -0500 (EST) Received: from outgoing.mit.edu (OUTGOING-AUTH.MIT.EDU [18.7.22.103]) by biscayne-one-station.mit.edu (8.12.4/8.9.2) with ESMTP id jBINOd5A021006; Sun, 18 Dec 2005 18:24:39 -0500 (EST) Received: from [18.101.0.226] ([18.101.0.226]) (authenticated bits=0) (User authenticated as raeburn@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.1/8.12.4) with ESMTP id jBINOZrr007320 (version=TLSv1/SSLv3 cipher=RC4-SHA bits=128 verify=NOT); Sun, 18 Dec 2005 18:24:36 -0500 (EST) In-Reply-To: References: MIME-Version: 1.0 (Apple Message framework v746.2) Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: Cc: rt@krbdev.mit.edu Content-Transfer-Encoding: 7bit From: Ken Raeburn Subject: Re: [krbdev.mit.edu #3277] doubled kerberos logging to stderr Date: Sun, 18 Dec 2005 18:24:34 -0500 To: Denis Vlasenko X-Mailer: Apple Mail (2.746.2) X-Spam-Score: 1.217 X-Spam-Level: * (1.217) X-Spam-Flag: NO X-Scanned-BY: MIMEDefang 2.42 RT-Send-Cc: X-RT-Original-Encoding: us-ascii Content-Length: 1609 On Dec 18, 2005, at 07:35, Denis Vlasenko via RT wrote: > 2005-12-18 14:26:49.560868500 conf_files > 2005-12-18 14:26:49.561030500 conf_file:/etc/krb5.conf > 2005-12-18 14:26:49.561846500 conf_file:/etc/krb5.conf > 2005-12-18 14:26:49.562310500 kdc Okay, that looks like the default profile path has /etc/krb5.conf listed twice. Could you check in the generated include/krb5/osconf.h and see what DEFAULT_PROFILE_PATH (and DEFAULT_SECURE_PROFILE_PATH) is defined as? Normally it should be /etc/krb5.conf and $sysconfdir/ krb5.conf, where $sysconfdir is normally $prefix/etc, so unless prefix is empty or you set sysconfdir, something funny is going on. Perhaps the sed substitution done in include/krb5/Makefile didn't work right, and generated a broken osconf.h? (It looks like we *will* do the wrong thing if --sysconfdir=/ is given at configure time. We should perhaps have the profile code check whether the same file is included twice even via different paths, and not duplicate the data -- though having the hard-link behavior be different from copy-of-file behavior would be a little odd. And all of that aside, I think it would make sense for the logging code to ignore duplicates, but since duplicates could probably confuse other bits of our code too, that's not a complete fix.) > 2005-12-18 14:27:43.615334500 conf_file:/usr/app/krb5-1.4.3/var/ > krb5kdc/kdc.conf - can't read it This uses DEFAULT_KDC_PROFILE, also defined in osconf.h, but that uses $localstatedir, normally $prefix/var. So it looks like that part of the sed substitution worked... Ken