AW: Core Dump with gsstest-1.26 and krb5-1.4.2

Barbat, Calin c.barbat at osram.de
Wed Sep 21 02:55:03 EDT 2005


Try compiling the adapter and using it instead of the /usr/local/lib/libgssapi_krb5.so in the "-l" option to your call to gsstest.

krb5-1.3.5 and krb5-1.3.6 (with the adapter) worked well for me. As I didn't try further releases of krb5, I can't say anything about their behavior. 

I'd be interested in the outcome of this investigation.

Mit freundlichen Grüßen / Best regards

Calin Barbat

-----Ursprüngliche Nachricht-----
Von: kerberos-bounces at MIT.EDU [mailto:kerberos-bounces at MIT.EDU] Im Auftrag von Christoph Weizen
Gesendet: Montag, 19. September 2005 18:50
An: kerberos at MIT.EDU
Betreff: Core Dump with gsstest-1.26 and krb5-1.4.2

Hi list,

I experimentize with kerberos, sncadapt and gsstest to maybe get Single Sign-On work with a Windows Client (SAPGUI) to a Unix/Linux (SAP) Server.

So I compiled krb5-1.4.2 (./configure --enable-shared) and gsstest-1.26. 
kinit and klist works. But when running gsstest I get a core dump.

$ ./gsstest -l /usr/local/lib/libgssapi_krb5.so -d 4 -p out.txt Sending verbose output to file "out.txt"
Segmentation fault (core dumped)

$ gdb ./gsstest core
[...]
#0  krb5_copy_principal (context=0x2f800001, inprinc=0xfeab2b4,
     outprinc=0xffffe03c) at copy_princ.c:61
61              unsigned int len = krb5_princ_component(context, 
inprinc, i)->length

I'm testig on a OpenPower 720 with SuSE Enterprise Linux 9 ppc.
Did I something wrong?

Head of out.txt
**************************************************************************
   *** 
   ***
   ***  "gsstest" -- GSS-API v2  Shared Library API Test Program 
   ***
   *** 
   ***
   ***  Version 1.26    03-Sep-2002 
   ***
   *** 
   ***
   ***  This implementation is Copyright (c), 1998  SAP AG Walldorf 
   ***
   *** 
   ***
 
**************************************************************************
   ***      This tool may be freely used to test functionality and 
   ***
   ***      robustness of GSS-API v2 mechanism implemenations 
   ***
 
**************************************************************************
   *** THIS SOFTWARE IS PROVIDED BY SAP AG ``AS IS'' AND ANY EXPRESSED 
   ***
   *** OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 
   ***
   *** IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR ***
   *** PURPOSE ARE DISCLAIMED. SAP AG SHALL BE LIABLE FOR ANY DAMAGES 
   ***
   *** ARISING OUT OF THE USE OF THIS SOFTWARE ONLY IF CAUSED BY SAP AG'S ***
   *** INTENT OR GROSS NEGLIGENCE. IN CASE SAP AG IS LIABLE UNDER THIS 
   ***
   *** AGREEMENT FOR DAMAGES CAUSED BY SAP AG'S GROSS NEGLIGENCE SAP AG 
   ***
   *** FURTHER SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, ***
   *** EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
TO,***
   *** PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, 
   ***
   *** OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 
   ***
   *** THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, 
   ***
   *** OR TORT, AND SHALL NOT BE LIABLE IN EXCESS OF THE AMOUNT OF 
   ***
   *** DAMAGES TYPICALLY FORESEEABLE FOR SAP AG, WHICH SHALL IN NO EVENT
  ***
   *** EXCEED US$ 500.000.- 
   ***
 
**************************************************************************

Timer resolution of gettimeofday() is (at least)      0.001 millisec
1 second passed in    999.999 millisec.

=====================================================================
   Current Date&Time :  Mon, 19-Sep-2005   14:01:36   GMT -02:00
   Operating System  :  Linux
           -Release  :  2.6.5-7.191-pseries64
   Hardware/Machine  :  ppc64
   scalar C-types    :  void* ptrdiff_t size_t time_t long int wchar_t char
     (sizes in bits) :   32      32s      32u    32s   32s 32s   32s    8u
   Perf-Index (p-90) :  dbg= 6.80   (opt= 3.60)
   Timer Resolution  :  0.001 millisec using "gettimeofday()"
   Hostname          :  rliss002
   Current user      :  root
=====================================================================

Loading GSS-API shared library #1 "/usr/local/lib/libgssapi_krb5.so" ...

   Resolving SAP SNC-Adapter functions ...
     GSS-API v2  "sapsnc_init_adapter"                  (  opt.   ) 
(missing)
     GSS-API v2  "sapsnc_export_cname_blob"             (  opt.   ) 
(missing)
     GSS-API v2  "sapsnc_import_cname_blob"             (  opt.   ) 
(missing)
   Resolving Misc Support functions ...
     GSS-API v1  "gss_indicate_mechs"                   (REQUIRED )    ok.
     GSS-API v1  "gss_display_status"                   (REQUIRED )    ok.
     GSS-API v1  "gss_release_buffer"                   (REQUIRED )    ok.
     GSS-API v1  "gss_release_oid_set"                  (REQUIRED )    ok.
     GSS-API v2  "gss_inquire_names_for_mech"           (requested)    ok.
     GSS-API v2  "gss_create_empty_oid_set"             (  opt.   )    ok.
     GSS-API v2  "gss_add_oid_set_member"               (  opt.   )    ok.
     GSS-API v2  "gss_test_oid_set_member"              (  opt.   )    ok.
   Resolving Names management functions ...
     GSS-API v1  "gss_compare_name"                     (REQUIRED )    ok.
     GSS-API v1  "gss_display_name"                     (REQUIRED )    ok.
     GSS-API v1  "gss_import_name"                      (REQUIRED )    ok.
     GSS-API v1  "gss_release_name"                     (REQUIRED )    ok.
     GSS-API v2  "gss_canonicalize_name"                (requested)    ok.
     GSS-API v2  "gss_export_name"                      (requested)    ok.
     GSS-API v2  "gss_duplicate_name"                   (  opt.   )    ok.
     GSS-API v2  "gss_inquire_mechs_for_name"           (  opt.   ) 
(missing)
   Resolving Credentials management functions ...
     GSS-API v1  "gss_acquire_cred"                     (REQUIRED )    ok.
     GSS-API v1  "gss_release_cred"                     (REQUIRED )    ok.
     GSS-API v1  "gss_inquire_cred"                     (REQUIRED )    ok.
     GSS-API v2  "gss_inquire_cred_by_mech"             (requested)    ok.
     GSS-API v2  "gss_add_cred"                         (  opt.   )    ok.
   Resolving Context-level functions ...
     GSS-API v1  "gss_init_sec_context"                 (REQUIRED )    ok.
     GSS-API v1  "gss_accept_sec_context"               (REQUIRED )    ok.
     GSS-API v1  "gss_delete_sec_context"               (REQUIRED )    ok.
     GSS-API v1  "gss_context_time"                     (REQUIRED )    ok.
     GSS-API v2  "gss_inquire_context"                  (REQUIRED )    ok.
     GSS-API v2  "gss_export_sec_context"               (requested)    ok.
     GSS-API v2  "gss_import_sec_context"               (requested)    ok.
     GSS-API v2  "gss_wrap_size_limit"                  (requested)    ok.
     GSS-API v1  "gss_process_context_token"            (  opt.   )    ok.
   Resolving V2 message protection functions ...
     GSS-API v2  "gss_get_mic"                          (REQUIRED )    ok.
     GSS-API v2  "gss_verify_mic"                       (REQUIRED )    ok.
     GSS-API v2  "gss_wrap"                             (REQUIRED )    ok.
     GSS-API v2  "gss_unwrap"                           (REQUIRED )    ok.

INcomplete GSS-API v2 implementation.
At least one of the "optional" calls is missing

Loading of GSS-API shared library completed.

cheers,
Christoph
________________________________________________
Kerberos mailing list           Kerberos at mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos




More information about the Kerberos mailing list