Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 18 Jul 2010 01:37:06 +0300
From:      "Reko Turja" <reko.turja@liukuma.net>
To:        "Benjamin Lee" <ben@b1c1l1.com>, "Jeremy Chadwick" <freebsd@jdc.parodius.com>
Cc:        "Mikhail T." <mi+thun@aldan.algebra.com>, freebsd-stable@freebsd.org, Joerg Pulz <Joerg.Pulz@frm2.tum.de>, Henrik /KaarPoSoft <henrik@kaarposoft.dk>
Subject:   Re: openldap client GSSAPI authentication segfaults in fbsd8stablei386
Message-ID:  <E2DB6131DE844948B7212A988E188268@rivendell>
In-Reply-To: <4C41F34E.2030309@b1c1l1.com>
References:  <EF24D143F0AF49AD9B27F838AFA0A6F4@rivendell>	<20100716110427.GA1939@icarus.home.lan>	<20100716111000.GA2501@icarus.home.lan>	<7AD0E8F6044245DEA6C218A28F08FB99@rivendell>	<20100716122446.GA3241@icarus.home.lan>	<B06E2DF2032C480AA3094E2F561911AF@rivendell>	<20100716135102.GA5625@icarus.home.lan>	<alpine.BSF.2.00.1007170834400.32465@unqrf.nqzva.sez2>	<20100717134149.GA40907@icarus.home.lan>	<677C8B72CF414265A0819E4824212BB5@rivendell> <20100717144120.GA42230@icarus.home.lan> <4C41F34E.2030309@b1c1l1.com>

next in thread | previous in thread | raw e-mail | index | archive | help

>Can you try reproducing the issue on 8-STABLE?
>
> I recently submitted a Heimdal patch against 8.1-STABLE and
> 9.0-CURRENT that resolves some libgssapi-related issues:
>
> http://www.freebsd.org/cgi/query-pr.cgi?pr=3Dkern/147454
>
> The patch breaks ABI, so you'll have to rebuild libgssapi-dependent
> applications.

When linking cyrus-sasl2 against gssapi library from either the 1.0.1=20
official port or the inofficial 1.2.1 patchset cyradm works as=20
expected and it logs a message from gssapi/kerberos telling that no=20
KDC's are available - which is to be expected on a system that isn't=20
using gssapi/kerberos in authenticating.

So the present behaviour in 8-RELEASE and 8-PRERELASE updated Monday=20
the 5th is clearly some kind of regression as system gsslib doesn't=20
seem to recognize the mech used or segfaults.

Benjamin, can you clarify how to apply your patch against the source=20
tree - I tried 'patch < the_patchset.diff' in /usr/src but it just=20
created a bunch of files in the /usr/src which I think isn't the=20
intention.

-Reko=20




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?E2DB6131DE844948B7212A988E188268>