Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 17 Jul 2010 11:31:00 -0700
From:      Jeremy Chadwick <freebsd@jdc.parodius.com>
To:        Benjamin Lee <ben@b1c1l1.com>
Cc:        Reko Turja <reko.turja@liukuma.net>, "Mikhail T." <mi+thun@aldan.algebra.com>, freebsd-stable@freebsd.org, Henrik /KaarPoSoft <henrik@kaarposoft.dk>, Joerg Pulz <Joerg.Pulz@frm2.tum.de>
Subject:   Re: openldap client GSSAPI authentication segfaults in fbsd8stablei386
Message-ID:  <20100717183100.GA47506@icarus.home.lan>
In-Reply-To: <4C41F34E.2030309@b1c1l1.com>
References:  <20100716111000.GA2501@icarus.home.lan> <7AD0E8F6044245DEA6C218A28F08FB99@rivendell> <20100716122446.GA3241@icarus.home.lan> <B06E2DF2032C480AA3094E2F561911AF@rivendell> <20100716135102.GA5625@icarus.home.lan> <alpine.BSF.2.00.1007170834400.32465@unqrf.nqzva.sez2> <20100717134149.GA40907@icarus.home.lan> <677C8B72CF414265A0819E4824212BB5@rivendell> <20100717144120.GA42230@icarus.home.lan> <4C41F34E.2030309@b1c1l1.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Jul 17, 2010 at 11:15:42AM -0700, Benjamin Lee wrote:
> On 07/17/2010 07:41 AM, Jeremy Chadwick wrote:
> > The problem really looks to be with GSSAPI, which is part of the base
> > system (src/lib/libgssapi).
> > 
> > If I can reproduce the problem on the test i386 system I'm building,
> > which will have the same port + configuration as the test amd64 system,
> > then I would say it's purely a GSSAPI thing regardless if you're using
> > GSSAPI w/ SASL or GSSAPI w/ Kerberos.
> 
> Can you try reproducing the issue on 8-STABLE?

As the thread has stated, I can't reproduce the problem on RELENG_8
amd64, but I'm still working on building the test i386 box to see if I
can reproduce the issue.

Please be aware the issue supposedly can be reproduced *without* use of
Kerberos/Heimdal.

> I recently submitted a Heimdal patch against 8.1-STABLE and 9.0-CURRENT
> that resolves some libgssapi-related issues:
> 
> http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/147454
> 
> The patch breaks ABI, so you'll have to rebuild libgssapi-dependent
> applications.

-- 
| Jeremy Chadwick                                   jdc@parodius.com |
| Parodius Networking                       http://www.parodius.com/ |
| UNIX Systems Administrator                  Mountain View, CA, USA |
| Making life hard for others since 1977.              PGP: 4BD6C0CB |




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20100717183100.GA47506>