[krbdev.mit.edu #7717] git commit

Tom Yu via RT rt-comment at krbdev.mit.edu
Fri Oct 11 20:28:37 EDT 2013


Fix KDC lock persistence on error conditions

If k5db2_dbopen() returns an error, krb5_db2_lock() can return an
error without unlocking the lock file.  This lock will persist until
krb5_db2_lock() executes successfully, preventing kadmind from making
changes to the KDB.  One possible trigger is running out of file
descriptors.

https://github.com/krb5/krb5/commit/047afa2244c33ef54805ebf0436db42c12e83332
Author: Tom Yu <tlyu at mit.edu>
Commit: 047afa2244c33ef54805ebf0436db42c12e83332
Branch: krb5-1.9
 src/plugins/kdb/db2/kdb_db2.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)



More information about the krb5-bugs mailing list