[1428] in Kerberos-V5-bugs

home help back first fref pref prev next nref lref last post

Re: Kerberos 5 beta 5 patches

daemon@ATHENA.MIT.EDU (Ed Phillips)
Mon May 22 09:50:31 1995

Date: Mon, 22 May 1995 09:47:16 -0400 (EDT)
From: Ed Phillips <flaregun@udel.edu>
To: kerberos@MIT.EDU
Cc: krb5-bugs@MIT.EDU
In-Reply-To: <9505181713.AA03859@zippy.psc.edu>

On Thu, 18 May 1995, John Studarus wrote:

> > ------------------------------------------------------
> >  I have tried using sclient/sserver -- I get 
> >      sclient: Software caused connection abort while using sendauth
> > from both platforms.
> 
> 	I noticed this same problem on an Ultrix 4.3 machine.  I
> tracked the problem down to a line in src/lib/crypto/des_crc.c.  This
> is code run by sserver (not sclient):
> 
> des_crc.c - line 163:
>     if (memcmp((char *)contents_get, (char *)contents_prd, CRC32_CKSUM_LENGTH) )
>         return KRB5KRB_AP_ERR_BAD_INTEGRITY;

	I don't think this is the error I'm getting with sserver run from
inetd... I get EBADF (9), which would mean read(), write(), etc. was
called with garbage as the first argument, or possibly an attempt to write
lock a file that's open O_RDONLY.  I've checked in the keytab code and I
haven't see any such problems (yet).  I'm concerned that something in
libkrb5.a is going wrong.  These are supposed to be just simple
tests/examples of using libkrb5.a, right?  They _should_ work, and 
they've worked in B4-3 and previously.

> 
> 	sserver is returning this error value to sclient.  However I did
> get sclient and sserver to run by running sserver by hand (as opposed
> to running it from inetd).
> 	i.e.:
> 
> 	sserver_machine% sserver 15000
> 	
> 	sclient_machine% sclient sserver_machine 15000
> 
> 	This worked fine.  rlogin works fine from inetd.
> 
> 	I suggest you get the patches from:
> 
> ftp://achilles.ctd.anl.gov/pub/kerberos.v5/k55.cdiff.950508
> 	
> 	It might solve some additional problems.
> 

	OK!  sclient and sserver work fine on Solaris if you run sserver 
as a deamon (not from inetd).  I would guess that sserver is not coded 
correctly to run from inetd (no biggie).  I still haven't had any success 
with sim_client and sim_server yet... can anyone get these to work.  I'd 
like to at least know why they don't work, to make sure there's nothing 
wrong with libkrb5.a.

	Thanks,
	Ed

+-------------------------------------------------------------------------+
| Ed Phillips <flaregun@udel.edu> University of Delaware (302) 831-6082   |
| Jr Systems Programmer, Network and Systems Services, Info. Technologies |
| Public key footprint: 1C D4 AC C2 A3 D5 97 AA  DB 3B D8 85 88 E7 40 B8  |
| Finger flaregun@udel.edu for PGP public key                             |
+-------------------------------------------------------------------------+


home help back first fref pref prev next nref lref last post