Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >

KB-11803: adclient segmentation fault error

Authentication Service ,  

26 March,19 at 02:10 PM

On rare occasions it has been seen by Centrify Support that problems installing Centrify DirectControl can occur. In this example it was found that shortly after running the script, the following error message was seen:

./ line 3630: 12649 Segmentation fault
WARNING: Centrify adcheck exited with error(s).

User-added image

When using the GDB tool to examine the core dump file created from the segmentation fault error, it was discovered that the following setting in the /etc/krb5.conf was contributing to the issue: 

dns_lookup_realm = true 

Normally, before adjoin there should be a stock (sample) krb5.conf file which does not have the default_realm nor dns_lookup_realm set. 

After adjoin, adclient will update the krb5.conf, so it will have a valid default_realm and a valid dns_lookup_realm set. 

The problem occurs when before adjoin, there is a krb5.conf that does not have the default_realm set but does have the dns_lookup_realm set. This combination triggers a sequence of events inside the kerberos libraries with Centrify's hook that ends up in a DNS lookup loop. 

In the /etc/ directory, check to see if the krb5.conf.pre_cdc file exists. If so, rename it to krb5.conf and then rerun the script.

More about using the GDB debugging tool can be found here: