On 4/09/23 22:30, Taylor R Campbell wrote:
Can you install the debug set on one of the affected systems where you
can reproduce a problem to get more information out of the stack
traces?
OK, found a simpler reproducible crash. Run "kadmin -l" on a kdc and
try to change a password.
xen2# kadmin -l
kadmin> passwd ecsproctor
ecsproc...@ecs.vuw.ac.nz's Password:
Verifying - ecsproc...@ecs.vuw.ac.nz's Password:
Segmentation fault (core dumped)
Here is the backtrace
Core was generated by `kadmin'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0 0x0000000000000000 in ?? ()
(gdb) where
#0 0x0000000000000000 in ?? ()
#1 0x00007f11ca0423d4 in ARCFOUR_string_to_key (context=0x7f11cafc7000,
enctype=KRB5_ENCTYPE_ARCFOUR_HMAC_MD5,
password=..., salt=..., opaque=..., key=0x7f11caf514d8)
at
/src/work/10/src/crypto/external/bsd/heimdal/dist/lib/krb5/salt-arcfour.c:83
#2 0x00007f11ca041531 in krb5_string_to_key_data_salt
(context=context@entry=0x7f11cafc7000,
enctype=KRB5_ENCTYPE_ARCFOUR_HMAC_MD5, password=..., salt=...,
key=0x7f11caf514d8)
at
/src/work/10/src/crypto/external/bsd/heimdal/dist/lib/krb5/salt.c:173
#3 0x00007f11ca041662 in krb5_string_to_key_salt
(context=context@entry=0x7f11cafc7000, enctype=<optimized out>,
password=password@entry=0x7f7fff434b30 "FooBar123", salt=...,
key=<optimized out>)
at
/src/work/10/src/crypto/external/bsd/heimdal/dist/lib/krb5/salt.c:225
#4 0x00007f11cac11d25 in hdb_generate_key_set_password_with_ks_tuple
(principal=<optimized out>,
ks_tuple=<optimized out>, n_ks_tuple=<optimized out>,
num_keys=<optimized out>, keys=<optimized out>,
password=<optimized out>, context=<optimized out>)
at /src/work/10/src/crypto/external/bsd/heimdal/dist/lib/hdb/keys.c:800
#5 hdb_generate_key_set_password_with_ks_tuple (context=0x7f11cafc7000,
principal=<optimized out>,
password=password@entry=0x7f7fff434b30 "FooBar123",
ks_tuple=ks_tuple@entry=0x0,
n_ks_tuple=n_ks_tuple@entry=0, keys=keys@entry=0x7f7fff434990,
num_keys=num_keys@entry=0x7f7fff434998)
at /local/SAVE/10_64.base.debug/usr/include/krb5/hdb-protos.h:346
#6 0x00007f11cb00ef50 in _kadm5_set_keys
(context=context@entry=0x7f11cafc7180, ent=ent@entry=0x7f7fff434a28,
n_ks_tuple=n_ks_tuple@entry=0, ks_tuple=ks_tuple@entry=0x0,
password=password@entry=0x7f7fff434b30 "FooBar123")
at
/src/work/10/src/crypto/external/bsd/heimdal/dist/lib/kadm5/set_keys.c:55
#7 0x00007f11cb007813 in change (server_handle=0x7f11cafc7180,
princ=<optimized out>, keepold=0, n_ks_tuple=0,
ks_tuple=0x0, password=0x7f7fff434b30 "FooBar123", cond=cond@entry=0)
at
/src/work/10/src/crypto/external/bsd/heimdal/dist/lib/kadm5/chpass_s.c:95
#8 0x00007f11cb007969 in kadm5_s_chpass_principal
(server_handle=<optimized out>, princ=<optimized out>,
keepold=<optimized out>, n_ks_tuple=<optimized out>,
ks_tuple=<optimized out>, password=<optimized out>)
at
/src/work/10/src/crypto/external/bsd/heimdal/dist/lib/kadm5/chpass_s.c:195
#9 0x00000001d240945d in set_password (keepold=<optimized out>,
password=<optimized out>,
principal=0x7f11cafb53c0) at
/src/work/10/src/crypto/external/bsd/heimdal/dist/kadmin/cpw.c:113
#10 do_cpw_entry (data=<optimized out>, principal=0x7f11cafb53c0)
at /src/work/10/src/crypto/external/bsd/heimdal/dist/kadmin/cpw.c:141
#11 do_cpw_entry (principal=0x7f11cafb53c0, data=<optimized out>)
at /src/work/10/src/crypto/external/bsd/heimdal/dist/kadmin/cpw.c:130
#12 0x00000001d240ed3b in foreach_principal (exp_str=<optimized out>,
func=func@entry=0x1d2409340 <do_cpw_entry>,
funcname=funcname@entry=0x1d240f97c "cpw",
data=data@entry=0x7f7fff434ca0)
at /src/work/10/src/crypto/external/bsd/heimdal/dist/kadmin/util.c:626
#13 0x00000001d240966f in cpw_entry (opt=opt@entry=0x7f7fff434d70,
argc=1, argv=0x7f11cb268bc8)
at /src/work/10/src/crypto/external/bsd/heimdal/dist/kadmin/cpw.c:187
#14 0x00000001d2407703 in passwd_wrap (argc=<optimized out>,
argv=0x7f11cb268bc0) at kadmin-commands.c:263
#15 0x00007f11ca401f48 in sl_command_loop (cmds=cmds@entry=0x1d2614d80
<commands>,
prompt=prompt@entry=0x1d2410ef8 "kadmin> ", data=data@entry=0x0)
at /src/work/10/src/crypto/external/bsd/heimdal/dist/lib/sl/sl.c:333
#16 0x00000001d240f2a5 in main (argc=<optimized out>, argv=<optimized out>)
at
/src/work/10/src/crypto/external/bsd/heimdal/dist/kadmin/kadmin.c:290
as to the su issue, I think that is a separate problem related to
revision 1.10 of pam_ksu.c. If I revert that then su works.
cheers
mark