AW: Core Dump with gsstest-1.26 and krb5-1.4.2

Christoph Weizen cwei at gmx.net
Wed Sep 21 12:56:10 EDT 2005


I compiled snckrb5.so and tried it with gsstest -l.
The same thing. It core dumps with the same function.

Then I tried krb5-1.3.5. Same again, same function.
Nevertheless with krb5-1.4.2 I get something like:
-------
TEST: *default* initiating credentials (inquire_cred only)
ERROR: OUCH! Lifetime has increased by 12 sec while 0 sec passed!
RESULT  NOT ok (rc=1)
-------
With krb5-1.3.5 this test is ok.

Furthermore I worrie about:
-------
TEST: acquiring initiating credentials (gss_name_t)
RESULT  OK
TEST: acquiring initiating credentials (printable name)
RESULT  OK
TEST: acquiring initiating credentials (can. printable name)
ERROR: gss_canonicalize_name() FAILED to clear minor_status!
ERROR: gss_export_name() FAILED to clear minor_status!
ERROR: gss_canonicalize_name() FAILED to clear minor_status!
RESULT  NOT ok (rc=3)
-------
TEST: acquiring accepting credentials for target (printable name)
   for identity "rzuser1 at EXAMPLE.NET"
Status:  gss_acquire_cred Acc() == (GSS_S_FAILURE)
          gss_display_status(0x000d0000,GSS_S_GSS_CODE) =
            "Miscellaneous failure"
          gss_display_status(0x025ea101,GSS_S_MECH_CODE) =
            "No principal in keytab matches desired name"
RESULT  NOT ok (rc=1)
-------

I configured /etc/krb5.conf. kinit rzuser1, klist works. 
/etc/krb5.keytab holds one entry for rzuser1.

---
Christoph

Barbat, Calin wrote:
> Try compiling the adapter and using it instead of the /usr/local/lib/libgssapi_krb5.so in the "-l" option to your call to gsstest.
> 
> krb5-1.3.5 and krb5-1.3.6 (with the adapter) worked well for me. As I didn't try further releases of krb5, I can't say anything about their behavior. 
> 
> I'd be interested in the outcome of this investigation.
> 
> Mit freundlichen Grüßen / Best regards
> 
> Calin Barbat


More information about the Kerberos mailing list