[krbdev.mit.edu #8295] kdb5_ldap_stash_service_password() stash file logic needs tweaking

Will Fiveash via RT rt-comment at krbdev.mit.edu
Thu Dec 3 14:23:07 EST 2015


In kdb5_ldap_stash_service_password() there is a call to
profile_get_string() at line 127 which is:

        profile_get_string (util_context->profile, KDB_MODULE_SECTION,
section,
                            "ldap_service_password_file", NULL, &file_name);

The problem with this code is that if one has a [dbmodules] section in
krb5.conf but it doesn't contain an assignment for
ldap_service_password_file then file_name ends up being NULL and the
kdb5_ldap_util stashsrvpw command fails with a Failed to open file
error.  The code at line 127 should be:

        profile_get_string (util_context->profile, KDB_MODULE_SECTION,
section,
                            "ldap_service_password_file",
                            DEF_SERVICE_PASSWD_FILE, &file_name);
                            ^^^^^ this as the default value instead of NULL



More information about the krb5-bugs mailing list