[3069] in Kerberos-V5-bugs
krb5-libs/712: value of krb4_srvtab not observed
daemon@ATHENA.MIT.EDU (michael shiplett)
Tue Apr 13 16:36:10 1999
Resent-From: gnats@rt-11.MIT.EDU (GNATS Management)
Resent-To: krb5-unassigned@RT-11.MIT.EDU
Resent-Reply-To: krb5-bugs@MIT.EDU, michael shiplett <walrus@ans.net>
Date: Mon, 12 Apr 1999 16:12:51 -0400
From: michael shiplett <walrus@ans.net>
To: krbcore@MIT.EDU
>Number: 712
>Category: krb5-libs
>Synopsis: kshd/klogind parse /etc/krb5.conf:libdefaults:krb4_srvtab incorrectly.
>Confidential: no
>Severity: serious
>Priority: high
>Responsible: krb5-unassigned
>State: open
>Class: sw-bug
>Submitter-Id: unknown
>Arrival-Date: Tue Apr 13 16:36:02 EDT 1999
>Last-Modified:
>Originator: michael shiplett
>Organization:
UUNET
Ann Arbor
>Release: krb5-1.0.6-beta2
>Environment:
System: SunOS fuseki.aa.ans.net 5.5.1 Generic_103640-24 sun4u sparc SUNW,Ultra-1
Architecture: sun4
System: SunOS euro.aa.ans.net 5.6 Generic_105181-12 sun4u sparc SUNW,Ultra-60
Architecture: sun4
System: AIX aixinst.aa.ans.net 2 3 000021334100
>Description:
klogind and kshd are unable to read /etc/krb5.conf to find the value
of krb4_srvtab; hence, k4 compatibility is broken unless /etc/srvtab
is (or points to) the location of the v4 srvtab.
It appears the problem is in the changes to src/lib/krb4/g_cnffile.c.
I do not know at this time whether the problem is in parsing all of
krb5.conf or just the krb4_srvtab information.
>How-To-Repeat:
1. Move the v4 srvtab to a non-default location, i.e., somewhere other
than /etc/srvtab.
2. Make an entry to the libdefaults section of /etc/krb5.conf
setting krb4_srvtab to the new location.
3. Attempt to rsh/rlogin in using v4 client---it will work under
krb5-1.0.5 but fail under krb5-1.0.6-beta2.
>Fix:
kluge:
ln -s <actual_v4_srvtab_file> /etc/srvtab
correct:
fix the offending code (I haven't found it yet).
>Audit-Trail:
>Unformatted:
