Bug 127336 - krb5 package breaks with openafs
Summary: krb5 package breaks with openafs
Alias: None
Product: Fedora
Classification: Fedora
Component: krb5   
(Show other bugs)
Version: 2
Hardware: All
OS: Linux
Target Milestone: ---
Assignee: Nalin Dahyabhai
QA Contact: Brian Brock
Depends On:
TreeView+ depends on / blocked
Reported: 2004-07-06 19:03 UTC by Jack Neely
Modified: 2007-11-30 22:10 UTC (History)
1 user (show)

Fixed In Version: 1.3.4-2
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2004-07-27 22:01:45 UTC
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

Description Jack Neely 2004-07-06 19:03:59 UTC
Description of problem:
The most recent MIT kerberos errata for FC1 somehow breaks pam_krb5afs.so.

pam_krb5afs.so is segfaulting somewhere in the login process with
NCSU's realm kit.  (openafs+hesiod+kerberos).  If the user
successfully logs in, he is imediantly returned to the login prompt or
gdm screen.  

I have some straces that might be useful, although they didn't seem to
shed much light on the subject.  Otherwise, I'm having a hard time
tracking this one down.  Let me know how I can help you debug this.

Version-Release number of selected component (if applicable):
This is the krb5 package on Fedora Core 1 1.3.3-6.  Downgrading back
to 1.3.1-6 makes the problem go away.

Comment 1 Jack Neely 2004-07-08 19:23:32 UTC
I've duplicated the problem with Fedora Core 2.  Being I'm more
interested in that I'm changing the version for this bug.

The login process is segfaulting directly after the pam_krb5afs.so
module calls krb_afslog() around line 113 of tokens.c.

Now to play in the evil kerberos code...*sigh*

Comment 2 Jack Neely 2004-07-08 21:53:58 UTC
Nalin, if you get a chance to look I've traced things thus far:

The segfault is happening somewhere in the get_cred() fuction from the
krbafs package in afskrb.c.  So next on my list to track are


Also, I've noticed that this is the second token that pam_krb5.so is
trying to get.

Comment 3 Jack Neely 2004-07-23 18:46:17 UTC

I've discovered that if you remove patch 24
(krb5-1.3.1-server-sort.patch) then the krb4 bits get all the
afstokens without segfaulting.  In otherwords, there's something amiss
with that patch...

Note You need to log in before you can comment on or make changes to this bug.