WARNING: no_suid: setuid(0): (1) Operation not permitted

classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

WARNING: no_suid: setuid(0): (1) Operation not permitted

David Touzeau-3

Hi

This error is generated every 15 minutes when using any authenticator helper (ntlm, kerberos...)

Is there a way to investigate on this issue ?

kidxx| WARNING: no_suid: setuid(0): (1) Operation not permitted

Sometimes, after rebooting the system, issue is fixed for an undetermined period.

Using squid 4.13 on Debian 10 Intel 64 bits.

regards



_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users
Reply | Threaded
Open this post in threaded view
|

Re: WARNING: no_suid: setuid(0): (1) Operation not permitted

Eliezer Croitoru-3

squid -v

 

output might help to understand a bit.

I do not know if the helper is the one that does that but it’s a matter of permissions or FD limits.
This is as far as I know.

If you or anyone have the option to create a full kerberos lab it might help to re-create this issue.

 

I can create the basic Debian machine but not the whole Kerberos setup in a sec.

 

Eliezer

 

----

Eliezer Croitoru

Tech Support

Mobile: +972-5-28704261

Email: [hidden email]

Zoom: Coming soon

 

 

From: squid-users <[hidden email]> On Behalf Of David Touzeau
Sent: Wednesday, January 13, 2021 4:17 PM
To: 'Squid Users' <[hidden email]>
Subject: [squid-users] WARNING: no_suid: setuid(0): (1) Operation not permitted

 


Hi

This error is generated every 15 minutes when using any authenticator helper (ntlm, kerberos...)

Is there a way to investigate on this issue ?

kidxx| WARNING: no_suid: setuid(0): (1) Operation not permitted

Sometimes, after rebooting the system, issue is fixed for an undetermined period.

Using squid 4.13 on Debian 10 Intel 64 bits.

regards


_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users
Reply | Threaded
Open this post in threaded view
|

Re: WARNING: no_suid: setuid(0): (1) Operation not permitted

Amos Jeffries
Administrator
In reply to this post by David Touzeau-3
On 14/01/21 3:17 am, David Touzeau wrote:

>
> Hi
>
> This error is generated every 15 minutes when using any authenticator
> helper (ntlm, kerberos...)
>
> Is there a way to investigate on this issue ?
>
> kidxx| WARNING: no_suid: setuid(0): (1) Operation not permitted
>

This looks like <https://bugs.squid-cache.org/show_bug.cgi?id=3785>


Amos
_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users
Reply | Threaded
Open this post in threaded view
|

Re: WARNING: no_suid: setuid(0): (1) Operation not permitted

David Touzeau-3
Yes it seems the same bug but the ticket is not relevant (FreeBSD) as i'm on Debian and on a modern kernel

The main incomprehensible behavior that is issue occurs sometimes as setuid is a sticky bit permission..

squid -v output:

Squid Cache: Version 4.13
Service Name: squid

This binary uses OpenSSL 1.1.1d  10 Sep 2019. For legal restrictions on distribution see https://www.openssl.org/source/license.html

configure options:  '--prefix=/usr' '--build=x86_64-linux-gnu' '--includedir=/include' '--mandir=/share/man' '--infodir=/share/info' '--localstatedir=/var' '--libexecdir=/lib/squid3' '--disable-maintainer-mode' '--disable-dependency-tracking' '--datadir=/usr/share/squid3' '--sysconfdir=/etc/squid3' '--enable-gnuregex' '--enable-removal-policy=heap' '--enable-follow-x-forwarded-for' '--enable-removal-policies=lru,heap' '--enable-arp-acl' '--enable-truncate' '--with-large-files' '--with-pthreads' '--enable-esi' '--enable-storeio=aufs,diskd,ufs,rock' '--enable-x-accelerator-vary' '--with-dl' '--enable-linux-netfilter' '--with-netfilter-conntrack' '--enable-wccpv2' '--enable-eui' '--enable-auth' '--enable-auth-basic' '--enable-snmp' '--enable-icmp' '--enable-auth-digest' '--enable-log-daemon-helpers' '--enable-url-rewrite-helpers' '--enable-auth-ntlm' '--with-default-user=squid' '--enable-icap-client' '--disable-cache-digests' '--enable-poll' '--enable-epoll' '--enable-async-io=128' '--enable-zph-qos' '--enable-delay-pools' '--enable-http-violations' '--enable-url-maps' '--enable-ecap' '--enable-ssl' '--with-openssl' '--enable-ssl-crtd' '--enable-xmalloc-statistics' '--enable-ident-lookups' '--with-filedescriptors=65536' '--with-aufs-threads=128' '--disable-arch-native' '--with-logdir=/var/log/squid' '--with-pidfile=/var/run/squid/squid.pid' '--with-swapdir=/var/cache/squid' 'build_alias=x86_64-linux-gnu'


Le 14/01/2021 à 05:43, Amos Jeffries a écrit :
On 14/01/21 3:17 am, David Touzeau wrote:

Hi

This error is generated every 15 minutes when using any authenticator helper (ntlm, kerberos...)

Is there a way to investigate on this issue ?

kidxx| WARNING: no_suid: setuid(0): (1) Operation not permitted


This looks like <https://bugs.squid-cache.org/show_bug.cgi?id=3785>


Amos
_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users


_______________________________________________
squid-users mailing list
[hidden email]
http://lists.squid-cache.org/listinfo/squid-users