Re: kerberos issues with 10.0_BETA post openssl update

[Mark Davies <mark%ecs.vuw.ac.nz@localhost>]

On 5/09/23 23:11, Markus Kilbinger wrote:
> In a preexisting krb-installation on an aarch64 machine (odroid c2)
> kadmin still dumps core when trying to add a new principal (even after
> recent source changes):

Same here (other than and64)


xen2# kadmin -l add -r host/xx
Max ticket life [unlimited]:
Max renewable life [unlimited]:
Principal expiration time [never]:
Password expiration time [never]:
Attributes []:
Policy [default]:
Segmentation fault (core dumped)

xen2# gdb /usr/sbin/kadmin ./kadmin.core
GNU gdb (GDB) 11.0.50.20200914-git
Copyright (C) 2020 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later 
<http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.
Type "show copying" and "show warranty" for details.
This GDB was configured as "x86_64--netbsd".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
<https://www.gnu.org/software/gdb/bugs/>.
Find the GDB manual and other documentation resources online at:
    <http://www.gnu.org/software/gdb/documentation/>.

For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/sbin/kadmin...
Reading symbols from /usr/libdata/debug//usr/sbin/kadmin.debug...
[New process 27647]
Core was generated by `kadmin'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0  0x0000000000000000 in ?? ()
(gdb) where
#0  0x0000000000000000 in ?? ()
#1  0x000070e63fc423d4 in ARCFOUR_string_to_key (context=0x70e640ec9000, 
enctype=KRB5_ENCTYPE_ARCFOUR_HMAC_MD5,
    password=..., salt=..., opaque=..., key=0x70e640ed33d8)
    at 
/src/work/10/src/crypto/external/bsd/heimdal/dist/lib/krb5/salt-arcfour.c:83
#2  0x000070e63fc41531 in krb5_string_to_key_data_salt 
(context=context@entry=0x70e640ec9000,
    enctype=KRB5_ENCTYPE_ARCFOUR_HMAC_MD5, password=..., salt=..., 
key=0x70e640ed33d8)
    at 
/src/work/10/src/crypto/external/bsd/heimdal/dist/lib/krb5/salt.c:173
#3  0x000070e63fc41662 in krb5_string_to_key_salt 
(context=context@entry=0x70e640ec9000, enctype=<optimized out>,
    password=password@entry=0x7f7fff0650c0 "tmOogi:Mar", salt=..., 
key=<optimized out>)
    at 
/src/work/10/src/crypto/external/bsd/heimdal/dist/lib/krb5/salt.c:225
#4  0x000070e640811d25 in hdb_generate_key_set_password_with_ks_tuple 
(principal=<optimized out>,
    ks_tuple=<optimized out>, n_ks_tuple=<optimized out>, 
num_keys=<optimized out>, keys=<optimized out>,
    password=<optimized out>, context=<optimized out>)
    at /src/work/10/src/crypto/external/bsd/heimdal/dist/lib/hdb/keys.c:800
#5  hdb_generate_key_set_password_with_ks_tuple (context=0x70e640ec9000, 
principal=<optimized out>,
    password=password@entry=0x7f7fff0650c0 "tmOogi:Mar", 
ks_tuple=<optimized out>, n_ks_tuple=n_ks_tuple@entry=0,
    keys=keys@entry=0x7f7fff064e10, num_keys=num_keys@entry=0x7f7fff064e18)
    at /local/SAVE/10_64.base.debug/usr/include/krb5/hdb-protos.h:346
#6  0x000070e640c0ef50 in _kadm5_set_keys 
(context=context@entry=0x70e640ec9180, ent=ent@entry=0x7f7fff064e68,
    n_ks_tuple=n_ks_tuple@entry=0, ks_tuple=<optimized out>, 
password=password@entry=0x7f7fff0650c0 "tmOogi:Mar")
    at 
/src/work/10/src/crypto/external/bsd/heimdal/dist/lib/kadm5/set_keys.c:55
#7  0x000070e640c09e70 in kadm5_s_create_principal 
(server_handle=0x70e640ec9180, princ=<optimized out>,
    mask=<optimized out>, n_ks_tuple=0, ks_tuple=<optimized out>, 
password=0x7f7fff0650c0 "tmOogi:Mar")
    at 
/src/work/10/src/crypto/external/bsd/heimdal/dist/lib/kadm5/create_s.c:208
#8  0x000000000d40880d in add_one_principal (name=<optimized out>, 
rand_key=1, rand_password=0, use_defaults=0,
    password=0x7f7fff0650c0 "tmOogi:Mar", policy=<optimized out>, 
key_data=key_data@entry=0x0,
    max_ticket_life=0x0, max_renewable_life=0x0, attributes=0x0, 
expiration=0x0, pw_expiration=0x0)
    at /src/work/10/src/crypto/external/bsd/heimdal/dist/kadmin/ank.c:154
#9  0x000000000d408bea in add_new_key (opt=opt@entry=0x7f7fff065600, 
argc=1, argv=<optimized out>)
    at /src/work/10/src/crypto/external/bsd/heimdal/dist/kadmin/ank.c:263
#10 0x000000000d407920 in add_wrap (argc=<optimized out>, 
argv=0x7f7fff0659b8) at kadmin-commands.c:222
#11 0x000000000d40f441 in main (argc=3, argv=<optimized out>)
    at 
/src/work/10/src/crypto/external/bsd/heimdal/dist/kadmin/kadmin.c:281