[11525] in Kerberos-V5-bugs
[krbdev.mit.edu #6716] preauth mech duality causes havoc
daemon@ATHENA.MIT.EDU (Jeff Blaine via RT)
Thu May 6 13:17:26 2010
Mail-followup-to: rt@krbdev.mit.edu
mail-copies-to: never
From: "Jeff Blaine via RT" <rt-comment@krbdev.MIT.EDU>
In-Reply-To: <rt-6716@krbdev.mit.edu>
Message-ID: <rt-6716-32778.2.51228875540598@krbdev.mit.edu>
To: "'AdminCc of krbdev.mit.edu Ticket #6716'":;"'AdminCc of krbdev.mit.edu Ticket #6716'":;@MIT.EDU
Date: Thu, 6 May 2010 13:17:23 -0400 (EDT)
Reply-To: rt-comment@krbdev.MIT.EDU
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu
Based on 1.8 source, defining the same ID for 2 preauth mechs
causes kinit to segfault (and probably other things!)
"(2:00:59 PM) ghudson: I can't tell from that description whether that's
a bug in our code or one you introduced. It sounds like it might be a
bug in our code."
So here's the more detailed description.
# grep -h 'define KRB5_PADATA' plugins/preauth/myplugin/myplugin_main.c
plugins/preauth/cksum_body/cksum_body_main.c
#define KRB5_PADATA_MYPLUGIN 130
#define KRB5_PADATA_CKSUM_BODY_REQ 130
# alias kdc
alias kdc='pkill krb5kdc; sleep 1; /usr/mykrb/sbin/krb5kdc -r
MYREALM.OUR.ORG; ps -ef | grep krb5kdc | grep -v grep'
# kdc
root 19763 1 0 14:09 ? 00:00:00 /usr/mykrb/sbin/krb5kdc
-r MYREALM.OUR.ORG
#
> kinit jblaine@MYREALM.OUR.ORG
Segmentation fault
>
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
