What Should I Push On?

[Greg Hudson]

On 05/03/2012 08:52 PM, Henry B. Hotz wrote:
> [5571] 1336088306.8828: Selected etype info: etype aes256-cts, salt "SC.JPL.NASA.GOVhotz", params "
> CoolKey PIN: 
> [5571] 1336088310.707006: Preauth module pkinit (16) (flags=1) returned: 12/Cannot allocate memory
> [5571] 1336088310.708361: Preauth module pkinit (15) (flags=1) returned: 12/Cannot allocate memory

That almost certainly indicates a bug--either in our code, the
Scientific Linux packaging of it, or the PKCS11 library invoked for the
PIV card.

Unfortunately, I think the next step is to grab the SRPM for krb5 and
either (a) build with debugging symbols (and without optimization) and
start poking around in gdb, or (b) build with the PKINIT debugging
defines turned on and collect more information.  Either is pretty
time-consuming.