Re: ANNOUNCE: nfs-utils-1.2.2 released.

[Lukas Hejtmanek <xhejtman@ics.muni.cz>]

On Tue, Mar 09, 2010 at 10:18:58AM -0500, Kevin Coffman wrote:
> I've built nfs-utils with and without  --disable-tirpc and don't see
> this problem.
> =

> It could be a bug, but I would think that other [Debian and other]
> testers would have already hit it.
> =

> I'm concerned that perhaps your build issues may have somehow
> introduced a [bad] mix of headers?  (i.e. were things built using the
> libgssglue headers, or the Kerberos headers?)

I have both. If I remove gssglue headers, it still faults. If I remove
kerberos headers, it does not even compile.

I believe, that it has the following problem.

gssd calls gss_acquire_cred, it calls the one from libgssapi_krb5.so.2. =

This gss_acquire_cred filss in gss_union_cred_t structure. =

gssd calls gss_set_allowable_enctypes which is located in libgss_glue.
The libgssglue uses gss_union_cred_t structure.

This happens in limit_krb5_enctypes() in krb5_util.c

Unfortunately, gss_union_cred_t in libgssglue is missing one (first) item
compared to libgssapi_krb5.so.2, thus count is stored instead of mechs_arra=
y.
The mechs_array contains value 1 as I have shown. Dereferrencing means
segfault. =


Btw, do you have HAVE_SET_ALLOWABLE_ENCTYPES ?

-- =

Luk=E1=B9 Hejtm=E1nek