krb524 stops working (MIT 1.5.4 + 2007-005/6 patches + fakeka patch)

John Tang Boyland boyland at cs.uwm.edu
Fri Nov 9 11:14:15 EST 2007


Hello,

   We're slowly transitioning our kerberos installation to remove
krb4 functionality (we use kerberos for OpenAFS authentication).  I
built and installed MIT kerberos 1.5.4 with patches for security
advisories 2007-005 and 2007-006 and for fakeka (from the AFS
migration kit).

However, every once in a while, the krb524d stops responding to
requests.  "ps augx" says:

USER       PID %CPU %MEM   SZ  RSS TT       S    START  TIME COMMAND
root     12025  1.2 63.5184632156496 ?        S   Oct 15 382:56 /opt/local/sbin/krb524d -m

Last time this happened (apparently October 15th), I killed it and
started it up again, and it worked just fine.  But now it stopped
working again.  Is this a known problem with MIT krb5 1.5.4 ?  Does 
krb524d have memory leaks and require weekly restarts?

John Boyland



More information about the Kerberos mailing list