Bug 727041 - sssd_pam leaks file descriptors.
Summary: sssd_pam leaks file descriptors.
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: sssd
Version: 6.1
Hardware: Unspecified
OS: Unspecified
urgent
urgent
Target Milestone: rc
: ---
Assignee: Stephen Gallagher
QA Contact: Chandrasekar Kannan
URL:
Whiteboard:
Depends On: 726475 748855
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-08-01 06:46 UTC by RHEL Program Management
Modified: 2015-01-04 23:50 UTC (History)
11 users (show)

Fixed In Version: sssd-1.5.1-34.el6_1.3
Doc Type: Bug Fix
Doc Text:
Previously, SSSD did not properly close its PAM sockets after an authentication attempt, which eventually resulted in process resource exhaustion and a denial of service situation. The code has been modified to fix this issue, and file descriptors are now properly released when they are no longer in use.
Clone Of:
Environment:
Last Closed: 2011-08-10 10:25:45 UTC
Target Upstream Version:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2011:1143 0 normal SHIPPED_LIVE sssd bug fix update 2011-08-10 10:25:39 UTC

Description RHEL Program Management 2011-08-01 06:46:25 UTC
This bug has been copied from bug #726475 and has been proposed
to be backported to 6.1 z-stream (EUS).

Comment 5 Kaushik Banerjee 2011-08-05 09:22:52 UTC
Using the reproducer from https://bugzilla.redhat.com/show_bug.cgi?id=725281

With sssd-1.5.1-34.el6_1.2:
# ./check_user2 -s system-auth -n 2000 user8
Password: 
Error in "pam_authenticate": Module is unknown
Authentication failure for user "user8" in loop 767


With sssd-1.5.1-34.el6_1.3:
# ./check_user2 -s system-auth -n 2000 user8
Password: 
User "user8" authenticated successfully 2000 times


Verified in version:
# rpm -qi sssd | head
Name        : sssd                         Relocations: (not relocatable)
Version     : 1.5.1                             Vendor: Red Hat, Inc.
Release     : 34.el6_1.3                    Build Date: Fri 05 Aug 2011 01:39:11 AM IST
Install Date: Fri 05 Aug 2011 02:22:03 PM IST      Build Host: x86-006.build.bos.redhat.com
Group       : Applications/System           Source RPM: sssd-1.5.1-34.el6_1.3.src.rpm
Size        : 3463891                          License: GPLv3+
Signature   : (none)
Packager    : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>
URL         : http://fedorahosted.org/sssd/
Summary     : System Security Services Daemon

Comment 6 Miroslav Svoboda 2011-08-10 09:11:42 UTC
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
Previously, SSSD did not properly close its PAM sockets after an authentication attempt, which eventually resulted in process resource exhaustion and a denial of service situation. The code has been modified to fix this issue, and file descriptors are now properly released when they are no longer in use.

Comment 7 errata-xmlrpc 2011-08-10 10:25:45 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2011-1143.html


Note You need to log in before you can comment on or make changes to this bug.