AW: Core Dump with gsstest-1.26 and krb5-1.4.2
Christoph Weizen
cwei at gmx.net
Wed Sep 21 12:56:10 EDT 2005
I compiled snckrb5.so and tried it with gsstest -l.
The same thing. It core dumps with the same function.
Then I tried krb5-1.3.5. Same again, same function.
Nevertheless with krb5-1.4.2 I get something like:
-------
TEST: *default* initiating credentials (inquire_cred only)
ERROR: OUCH! Lifetime has increased by 12 sec while 0 sec passed!
RESULT NOT ok (rc=1)
-------
With krb5-1.3.5 this test is ok.
Furthermore I worrie about:
-------
TEST: acquiring initiating credentials (gss_name_t)
RESULT OK
TEST: acquiring initiating credentials (printable name)
RESULT OK
TEST: acquiring initiating credentials (can. printable name)
ERROR: gss_canonicalize_name() FAILED to clear minor_status!
ERROR: gss_export_name() FAILED to clear minor_status!
ERROR: gss_canonicalize_name() FAILED to clear minor_status!
RESULT NOT ok (rc=3)
-------
TEST: acquiring accepting credentials for target (printable name)
for identity "rzuser1 at EXAMPLE.NET"
Status: gss_acquire_cred Acc() == (GSS_S_FAILURE)
gss_display_status(0x000d0000,GSS_S_GSS_CODE) =
"Miscellaneous failure"
gss_display_status(0x025ea101,GSS_S_MECH_CODE) =
"No principal in keytab matches desired name"
RESULT NOT ok (rc=1)
-------
I configured /etc/krb5.conf. kinit rzuser1, klist works.
/etc/krb5.keytab holds one entry for rzuser1.
---
Christoph
Barbat, Calin wrote:
> Try compiling the adapter and using it instead of the /usr/local/lib/libgssapi_krb5.so in the "-l" option to your call to gsstest.
>
> krb5-1.3.5 and krb5-1.3.6 (with the adapter) worked well for me. As I didn't try further releases of krb5, I can't say anything about their behavior.
>
> I'd be interested in the outcome of this investigation.
>
> Mit freundlichen Grüßen / Best regards
>
> Calin Barbat
More information about the Kerberos
mailing list