[Date Prev][Date Next] [Chronological] [Thread] [Top]

segfault during sasl gssapi



Greetings.  I got a segfault and am hoping for some assistance.

Using openldap-2.3.21 on gentoo

This occured the first time I attempted to authenticate against my
kerberos ticket to the ldap server.

contents of /usr/lib64/sasl2/slapd.conf:
mech_list: gssapi digest-md5 cram-md5

contents of sasl configuration file:

sasl-secprops none

sasl-regexp
 uid=syncrepl,cn=SCHUPAN.LOCAL,cn=DIGEST-MD5,cn=auth

ldap:///ou=Entities,ou=AccessControl,dc=schupan,dc=local??sub?(&(uid=syncrepl)(objectclass=posixAccount))

sasl-regexp
 uid=(.*),cn=PLAIN,cn=auth
 ldap:///ou=Entities,ou=SAM,dc=schupan,dc=local??sub?(&(uid=
$1)(objectclass=posixAccount))

sasl-regexp
 uid=(.*),cn=LOGIN,cn=auth
 ldap:///ou=Entities,ou=SAM,dc=schupan,dc=local??sub?(&(uid=
$1)(objectclass=posixAccount))

sasl-regexp
 uid=(.*),cn=schupsrv02.schupan.local,cn=PLAIN,cn=auth
 ldap:///ou=Entities,ou=SAM,dc=schupan,dc=local??sub?(&(uid=
$1)(objectclass=posixAccount))

sasl-regexp
 uid=(.*),cn=schupsrv02.schupan.local,cn=LOGIN,cn=auth
 ldap:///ou=Entities,ou=SAM,dc=schupan,dc=local??sub?(&(uid=
$1)(objectclass=posixAccount))

sasl-regexp
 gidNumber=0\\+uidNumber=0,cn=peercred,cn=external,cn=auth
 uid=kerb,ou=Entities,ou=AccessControl,dc=schupan,dc=local

sasl-regexp
 uidnumber=(.*)\\+gidnumber=.*,cn=peercred,cn=external,cn=auth
 ldap:///ou=Entities,ou=SAM,dc=schupan,dc=local??sub?(&(uidNumber=
$1)(objectclass=posixAccount))

sasl-regexp
 uid=(.*),cn=schupan.local,cn=gssapi,cn=auth
 ldap:///ou=Entities,ou=SAM,dc=schupan,dc=local??sub?(&(uid=
$1)(objectclass=posixAccount))

security  ssf=0 transport=0 tls=0 sasl=0 update_ssf=0 update_transport=0
update_tls=0 update_sasl=0

sasl-realm SCHUPAN.LOCAL
sasl-host schupsrv02.schupan.local


Any information will be greatly appreciated.  Thanks in advance.

Dirk Bartley
Backtrace below





Here is a backtrace

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 1098918240 (LWP 19404)]
0x00002b07e3d2abd0 in AES_encrypt () from /usr/lib/libcrypto.so.0.9.7
(gdb) bt
#0  0x00002b07e3d2abd0 in AES_encrypt ()
from /usr/lib/libcrypto.so.0.9.7
#1  0x00002b07e4af6ff4 in _krb5_aes_cts_encrypt ()
from /usr/lib/libkrb5.so.17
#2  0x00002b07e4af8350 in krb5_generate_random_keyblock ()
from /usr/lib/libkrb5.so.17
#3  0x00002b07e4af85eb in krb5_generate_random_keyblock ()
from /usr/lib/libkrb5.so.17
#4  0x00002b07e4af8bf2 in krb5_decrypt_ivec ()
from /usr/lib/libkrb5.so.17
#5  0x00002b07e4af8d71 in krb5_decrypt () from /usr/lib/libkrb5.so.17
#6  0x00002b07e4b0db2d in krb5_decrypt_ticket ()
from /usr/lib/libkrb5.so.17
#7  0x00002b07e4b0de7f in krb5_verify_ap_req2 ()
from /usr/lib/libkrb5.so.17
#8  0x00002b07e4b0e454 in krb5_verify_ap_req ()
from /usr/lib/libkrb5.so.17
#9  0x00002b07e4b0e68e in krb5_rd_req () from /usr/lib/libkrb5.so.17
#10 0x00002b07e49c5bb7 in gsskrb5_is_cfx () from /usr/lib/libgssapi.so.4
#11 0x00002b07e49c6814 in gss_accept_sec_context ()
from /usr/lib/libgssapi.so.4
#12 0x00002b07e5fae600 in ?? () from /usr/lib64/sasl2/libgssapiv2.so.2
#13 0x00002b07e3a52079 in sasl_server_step ()
from /usr/lib/libsasl2.so.2
#14 0x00002b07e3a52441 in sasl_server_start ()
from /usr/lib/libsasl2.so.2
#15 0x000000000046c65e in slap_sasl_bind ()
#16 0x0000000000445292 in fe_op_bind ()
#17 0x0000000000444b97 in do_bind ()
#18 0x000000000042c99d in connection_client_stop ()
#19 0x00002b07e3182332 in ldap_int_thread_pool_shutdown ()
from /usr/lib/libldap_r-2.3.so.0
#20 0x00002b07e370d14a in start_thread () from /lib/tls/libpthread.so.0
#21 0x00002b07e44e6953 in clone () from /lib/tls/libc.so.6
#22 0x0000000000000000 in ?? ()
(gdb) quit
The program is running.  Exit anyway? (y or n) y

Attachment: signature.asc
Description: This is a digitally signed message part