Bug List: (This bug is not in your last search results)   Show last search results      Search page      Enter new bug
Bug#: 66919
Alias:
Product:
Component:
Status: RESOLVED
Resolution: FIXED
Assigned To: Ryan Phillips (RETIRED) <rphillips@gentoo.org>
Hardware:
OS:
Version:
Priority:
Severity:
Reporter: Christophe Saout <christophe@saout.de>
Add CC:
CC:
URL:
Summary:
Status Whiteboard:
Keywords:

Filename Description Type Creator Created Size Actions
pam_krb5_snap-2003.06.01-realm-empty.patch Workaround for pam_krb5 to not segfault when unable to get default realm (like in a chroot environment) patch Christophe Saout 2004-10-09 14:07 0000 550 bytes Details | Diff
pam_krb5_snap-2003.06.01-realm-empty.patch Workaround for pam_krb5 to not segfault when unable to get default realm (like in a chroot environment) patch Christophe Saout 2004-10-09 14:08 0000 548 bytes Details | Diff
Create a New Attachment (proposed patch, testcase, etc.) View All

Bug 66919 depends on: Show dependency tree
Bug 66919 blocks:
Votes: 0    Show votes for this bug    Vote for this bug

Additional Comments: (this is where you put emerge --info)


Not eligible to see or edit group visibility for this bug.






View Bug Activity   |   Format For Printing   |   XML   |   Clone This Bug

Description:   Opened: 2004-10-09 13:56 0000 
I spent the evening tracking down this bug.

I am using AuthPAM with proftpd and pam_krb5. proftpd always segfaults after logout, and lastlog then tells the user has gone without logout. Great... :)

Well, the problem is that proftpd does a chroot and then calls PAM_DELETE_CREDS. pam_krb5 tries to get the default krb5 realm and fails (because it can't access its config file due to chroot), the field is uninitialized, points into Nirvana and boom.

I've attached a patch that explicitly sets it to "" (empty string, better than nothing) before getting the default realm so that at it doesn't crash anymore.


Reproducible: Always
Steps to Reproduce:
1.
2.
3.

------- Comment #1 From Christophe Saout 2004-10-09 14:07:08 0000 ------- 
Created an attachment (id=41434) [details]
Workaround for pam_krb5 to not segfault when unable to get default realm (like
in a chroot environment)

------- Comment #2 From Christophe Saout 2004-10-09 14:08:24 0000 ------- 
Created an attachment (id=41435) [details]
Workaround for pam_krb5 to not segfault when unable to get default realm (like
in a chroot environment)

Sorry, wrong patch... this one is the working one.

------- Comment #3 From Ryan Phillips (RETIRED) 2005-06-30 15:53:31 0000 ------- 
Committed. Thanks
Bug List: (This bug is not in your last search results)   Show last search results      Search page      Enter new bug