Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 18 Jul 2010 01:37:06 +0300
From:      "Reko Turja" <reko.turja@liukuma.net>
To:        "Benjamin Lee" <ben@b1c1l1.com>, "Jeremy Chadwick" <freebsd@jdc.parodius.com>
Cc:        "Mikhail T." <mi+thun@aldan.algebra.com>, freebsd-stable@freebsd.org, Joerg Pulz <Joerg.Pulz@frm2.tum.de>, Henrik /KaarPoSoft <henrik@kaarposoft.dk>
Subject:   Re: openldap client GSSAPI authentication segfaults in fbsd8stablei386
Message-ID:  <E2DB6131DE844948B7212A988E188268@rivendell>
In-Reply-To: <4C41F34E.2030309@b1c1l1.com>
References:  <EF24D143F0AF49AD9B27F838AFA0A6F4@rivendell>	<20100716110427.GA1939@icarus.home.lan>	<20100716111000.GA2501@icarus.home.lan>	<7AD0E8F6044245DEA6C218A28F08FB99@rivendell>	<20100716122446.GA3241@icarus.home.lan>	<B06E2DF2032C480AA3094E2F561911AF@rivendell>	<20100716135102.GA5625@icarus.home.lan>	<alpine.BSF.2.00.1007170834400.32465@unqrf.nqzva.sez2>	<20100717134149.GA40907@icarus.home.lan>	<677C8B72CF414265A0819E4824212BB5@rivendell> <20100717144120.GA42230@icarus.home.lan> <4C41F34E.2030309@b1c1l1.com>

index | next in thread | previous in thread | raw e-mail


>Can you try reproducing the issue on 8-STABLE?
>
> I recently submitted a Heimdal patch against 8.1-STABLE and
> 9.0-CURRENT that resolves some libgssapi-related issues:
>
> http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/147454
>
> The patch breaks ABI, so you'll have to rebuild libgssapi-dependent
> applications.

When linking cyrus-sasl2 against gssapi library from either the 1.0.1 
official port or the inofficial 1.2.1 patchset cyradm works as 
expected and it logs a message from gssapi/kerberos telling that no 
KDC's are available - which is to be expected on a system that isn't 
using gssapi/kerberos in authenticating.

So the present behaviour in 8-RELEASE and 8-PRERELASE updated Monday 
the 5th is clearly some kind of regression as system gsslib doesn't 
seem to recognize the mech used or segfaults.

Benjamin, can you clarify how to apply your patch against the source 
tree - I tried 'patch < the_patchset.diff' in /usr/src but it just 
created a bunch of files in the /usr/src which I think isn't the 
intention.

-Reko 



help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?E2DB6131DE844948B7212A988E188268>