securid_sam2 plugin

[John Devitofranceschi]

On Mar 9, 2011, at 9:08 AM, Dmitri Pal wrote:

> On 03/08/2011 06:51 PM, John Devitofranceschi wrote:
>> 	
>> 
>> I have been wrestling with the securid_sam2 pluginfrom krb5 1.9  on a Solaris 10 (Update 7) x86 system, using version 8.1 of the RSA Authentication Agent API.
>> 
>> No matter what I do, the plugin causes krb5kdc to crash (SIGSEGV with core) during the AceInitialze call, while gathering entropy from the system.  
>> 
>> Is this a configuration that is known to work? Which versions of the API have been tested?
>> 
>> jd
>> 
> 
> Does AceInitialize work on the same machine from a simple test program?
> Running such test would allow you to better sort out who is at fault.
> 
> 
> 


I did run this test and it worked fine.  I then proceeded to work towards making my simple test program blow up in the same way as krb5kdc.

I was successful.

I reproduced the failure by creating a little plugin .so that implements a function runAI() which simply calls AceInitialze()

I then implemented a small program which dlopen()'s my plugin  as well as the other standard plugins that krb5kdc loads.

When the dlopen()s use the flag RTLD_LAZY, the call to runAI() works.

When RTLD_NOW is used in all the dlopen()s, AceInitialze() gets a SIGSEGV.

In the morning I will debug further.


jd