Bug 30163 - kinit core dumps against Win2K realm
Summary: kinit core dumps against Win2K realm
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Linux
Classification: Retired
Component: krb5
Version: 7.0
Hardware: i386
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Nalin Dahyabhai
QA Contact: Brian Brock
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2001-03-01 11:13 UTC by Phil Mayers
Modified: 2007-04-18 16:31 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2001-03-01 11:13:19 UTC
Embargoed:


Attachments (Terms of Use)

Description Phil Mayers 2001-03-01 11:13:11 UTC
From Bugzilla Helper:
User-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT 5.0)


kinit will dump core if used against a user without a DES key in a Win2K 
realm. If an NT4 domain is upgraded to a Win2K one, users will not have a 
DES key until the first password change.

MIT Kerberos does not do the NT4-compatible encryption types - that's 
fine, but a core dump is a problem, since anything linked to the Kerberos 
libraries (such as the pam_krb5 module) will also dump core rather than 
failing.

Specifically for us, we're performing SMTP auth using Exim's PAM support 
and the pam_krb5 module - an MTA dumping core is bad.

Reproducible: Always
Steps to Reproduce:
1. kinit <username who has NOT changed password since NT4 days>
2. Actual Results:  Error message "Segmentation fault (core dumped)"
3. Compile krb5-1.2.2 (now available from MIT)
4. kinit <username who has NOT changed password since NT4 days>
5. Prompt: "Password for username@REALM:"
6. Supply password
7. Error message "kinit(v5): KDC has no support for encryption type while 
getting initial credentials"

The latter is an "optimal failure"

Actual Results:  Error message "Segmentation fault (core dumped)"

Expected Results:  Error message "kinit(v5): KDC has no support for 
encryption type while getting initial credentials"

The recent release of krb5-1.2.2 fixes this bug. I would like RedHat to 
ship an RPM update down the pipe. (I want, I want.. :o)

Comment 1 Nalin Dahyabhai 2001-03-30 17:12:21 UTC
We'll be pushing out a 1.2.2-4 errata for 7.0 soonish.  Thanks!


Note You need to log in before you can comment on or make changes to this bug.