Re: kerberos issues with 10.0_BETA post openssl update

[Markus Kilbinger <mk%kilbi.de@localhost>]

In a preexisting krb-installation on an aarch64 machine (odroid c2)
kadmin still dumps core when trying to add a new principal (even after
recent source changes):

# kadmin -l add -r host/test
Max ticket life [1 day]:
Max renewable life [1 week]:
Principal expiration time [never]:
Password expiration time [never]:
Attributes []:
Policy [default]:
Memory fault (core dumped)

# gdb /usr/sbin/kadmin kadmin.core
GNU gdb (GDB) 13.2
Copyright (C) 2023 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Type "show copying" and "show warranty" for details.
This GDB was configured as "aarch64--netbsd".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<https://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
    <http://www.gnu.org/software/gdb/documentation/>.

For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/sbin/kadmin...
(No debugging symbols found in /usr/sbin/kadmin)
[New process 591]
Core was generated by `kadmin'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x0000000000000000 in ?? ()
(gdb) bt
#0  0x0000000000000000 in ?? ()
#1  0x0000f37a50b81320 in ?? () from /usr/lib/libkrb5.so.28
#2  0x0000f37a50b803a8 in krb5_string_to_key_data_salt_opaque () from
/usr/lib/libkrb5.so.28
#3  0x0000f37a50b8045c in krb5_string_to_key_data_salt () from
/usr/lib/libkrb5.so.28
#4  0x0000f37a50b805dc in krb5_string_to_key_salt () from /usr/lib/libkrb5.so.28
#5  0x0000f37a50c61fe0 in hdb_generate_key_set_password_with_ks_tuple
() from /usr/lib/libhdb.so.16
#6  0x0000f37a50cae978 in _kadm5_set_keys () from /usr/lib/libkadm5srv.so.16
#7  0x0000f37a50ca9e40 in kadm5_s_create_principal () from
/usr/lib/libkadm5srv.so.16
#8  0x000000000fdf85c4 in add_one_principal ()
#9  0x000000000fdf8930 in add_new_key ()
#10 0x000000000fdf7944 in add_wrap ()
#11 0x000000000fdff0b8 in main ()

Am Di., 5. Sept. 2023 um 00:10 Uhr schrieb Mark Davies <mark%ecs.vuw.ac.nz@localhost>:
>
>
>
> On 4/09/23 22:30, Taylor R Campbell wrote:
> > Can you share `ldd /usr/libexec/kadmind' on the machine where it's
> > crashing?  Wondering whether it's mixing shlib versions in one address
> > space, like https://gnats.netbsd.org/57603 (though that's not the same
> > issue because you're only using things in base).
>
>
> /usr/libexec/kadmind:
>          -lgssapi.11 => /usr/lib/libgssapi.so.11
>          -lkrb5.27 => /usr/lib/libkrb5.so.27
>          -lhx509.6 => /usr/lib/libhx509.so.6
>          -lasn1.10 => /usr/lib/libasn1.so.10
>          -lcom_err.8 => /usr/lib/libcom_err.so.8
>          -lc.12 => /usr/lib/libc.so.12
>          -lroken.20 => /usr/lib/libroken.so.20
>          -lutil.7 => /usr/lib/libutil.so.7
>          -lcrypt.1 => /usr/lib/libcrypt.so.1
>          -lcrypto.15 => /usr/lib/libcrypto.so.15
>          -lwind.1 => /usr/lib/libwind.so.1
>          -lheimbase.2 => /usr/lib/libheimbase.so.2
>          -lsqlite3.1 => /usr/lib/libsqlite3.so.1
>          -lm.0 => /usr/lib/libm.so.0
>          -lheimntlm.5 => /usr/lib/libheimntlm.so.5
>          -lkadm5srv.15 => /usr/lib/libkadm5srv.so.15
>          -lhdb.15 => /usr/lib/libhdb.so.15
>
> > Can you install the debug set on one of the affected systems where you
> > can reproduce a problem to get more information out of the stack
> > traces?
>
> I'll rebuild a tree with MKDEBUG and MKDEBUGLIB set now, and see what I see.
>
> cheers
> mark
>