Your message dated Wed, 13 Apr 2005 18:32:16 -0400
with message-id <[EMAIL PROTECTED]>
and subject line Bug#295027: fixed in libpam-krb5 1.0-11
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 13 Feb 2005 02:40:51 +0000
>From [EMAIL PROTECTED] Sat Feb 12 18:40:51 2005
Return-path: <[EMAIL PROTECTED]>
Received: from cassarossa.samfundet.no [129.241.93.19] (Debian-exim)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1D09gp-0001Ur-00; Sat, 12 Feb 2005 18:40:51 -0800
Received: from trofast.sesse.net ([129.241.93.32])
by cassarossa.samfundet.no with esmtp (Exim 4.34)
id 1D09gm-0007HG-0g; Sun, 13 Feb 2005 03:40:49 +0100
Received: from sesse by trofast.sesse.net with local (Exim 3.36 #1 (Debian))
id 1D09gl-0000nA-00; Sun, 13 Feb 2005 03:40:47 +0100
Content-Type: multipart/mixed; boundary="===============0366468575=="
MIME-Version: 1.0
From: "Steinar H. Gunderson" <[EMAIL PROTECTED]>
To: Debian Bug Tracking System <[EMAIL PROTECTED]>
Subject: libpam-krb5: default ccache name should contain the user's uid
X-Mailer: reportbug 3.7.1
Date: Sun, 13 Feb 2005 03:40:47 +0100
Message-Id: <[EMAIL PROTECTED]>
X-Spam-Score: -2.8 (--)
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
This is a multi-part MIME message sent by reportbug.
--===============0366468575==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Package: libpam-krb5
Version: 1.0-10
Severity: normal
Tags: patch
The default Kerberos credentials cache file is by convention (at least
by kinit and ssh-krb5, the two other things I have that create ccaches)
called /tmp/krb5cc_<uid>_<random>; however, libpam-krb5 creates
/tmp/krb5cc_<random> (ie. no uid), even though the manpage claims
/tmp/krb5cc_[uid] default credentials cache ([uid] is the decimal UID
of the user).
The problem with this is that it confuses rpc.gssd (the helper d<C3><A6>mon for
using NFSv4 with Kerberos authentication), which only looks for
/tmp/krb5cc_<uid>_* when trying to find the ccache for <uid>. I could of
course work around this by sending "ccache=/tmp/krb5cc_%u", but I can't
see from the source whether this would allow a symlink attack or not;
the best thing would simply be fixing the module.
Please see the attached patch -- it compiles, but is otherwise untested
(sorry about that).
-- System Information:
Debian Release: 3.1
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.11-rc3
Locale: LANG=C, LC_CTYPE=en_US.ISO8859-1 (charmap=ISO-8859-1)
Versions of packages libpam-krb5 depends on:
ii libc6 2.3.2.ds1-20 GNU C Library: Shared libraries an
ii libcomerr2 1.36rc5-1 common error description library
ii libkrb53 1.3.6-1 MIT Kerberos runtime libraries
ii libpam0g 0.76-22 Pluggable Authentication Modules l
--===============0366468575==
Content-Type: text/x-c; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename="libpam_krb5_include_uid_in_ccache.patch"
--- pam_krb5_auth.c.orig 2005-02-13 03:09:08.000000000 +0100
+++ pam_krb5_auth.c 2005-02-13 03:08:16.000000000 +0100
@@ -349,12 +349,18 @@
/* Get the cache name */
if (!cache_name) {
int ccache_fd;
- cache_name = strdup ("/tmp/krb5cc_XXXXXX");
+ /*
+ * "/tmp/krb5cc_4294967295_XXXXXX" is the largest we can get,
+ * and is 29 bytes long
+ */
+ cache_name = (char *)malloc(32);
if (!cache_name) {
DLOG("malloc()", "failure");
pamret = PAM_BUF_ERR;
goto cleanup3;
}
+ snprintf(cache_name, 32, "krb5cc_%d_XXXXXX",
+ pw->pw_uid);
ccache_fd = mkstemp (cache_name);
if( ccache_fd == -1 ) {
DLOG ("mkstemp()", "failure");
--===============0366468575==--
---------------------------------------
Received: (at 295027-close) by bugs.debian.org; 13 Apr 2005 22:52:32 +0000
>From [EMAIL PROTECTED] Wed Apr 13 15:52:32 2005
Return-path: <[EMAIL PROTECTED]>
Received: from newraff.debian.org [208.185.25.31] (mail)
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DLqim-0007E6-00; Wed, 13 Apr 2005 15:52:32 -0700
Received: from katie by newraff.debian.org with local (Exim 3.35 1 (Debian))
id 1DLqPA-0003z1-00; Wed, 13 Apr 2005 18:32:16 -0400
From: Russ Allbery <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
X-Katie: $Revision: 1.55 $
Subject: Bug#295027: fixed in libpam-krb5 1.0-11
Message-Id: <[EMAIL PROTECTED]>
Sender: Archive Administrator <[EMAIL PROTECTED]>
Date: Wed, 13 Apr 2005 18:32:16 -0400
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
X-CrossAssassin-Score: 3
Source: libpam-krb5
Source-Version: 1.0-11
We believe that the bug you reported is fixed in the latest version of
libpam-krb5, which is due to be installed in the Debian FTP archive:
libpam-krb5_1.0-11.diff.gz
to pool/main/libp/libpam-krb5/libpam-krb5_1.0-11.diff.gz
libpam-krb5_1.0-11.dsc
to pool/main/libp/libpam-krb5/libpam-krb5_1.0-11.dsc
libpam-krb5_1.0-11_powerpc.deb
to pool/main/libp/libpam-krb5/libpam-krb5_1.0-11_powerpc.deb
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Russ Allbery <[EMAIL PROTECTED]> (supplier of updated libpam-krb5 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Format: 1.7
Date: Wed, 13 Apr 2005 13:54:47 -0700
Source: libpam-krb5
Binary: libpam-krb5
Architecture: source powerpc
Version: 1.0-11
Distribution: unstable
Urgency: low
Maintainer: Sam Hartman <[EMAIL PROTECTED]>
Changed-By: Russ Allbery <[EMAIL PROTECTED]>
Description:
libpam-krb5 - PAM module for MIT Kerberos
Closes: 191001 271066 295027
Changes:
libpam-krb5 (1.0-11) unstable; urgency=low
.
* Return PAM_CRED_UNAVAIL to PAM_REINITIALIZE_CREDS as the apparently
most appropriate error message. (Closes: #191001)
* Remove reference to non-existant man page pam.conf(8) and change
pam(8) to pam(7). Thanks, Nik A. Melchior. (Closes: #271066)
* Include the user UID in the default ticket cache name so that rpc.gssd
and similar programs can find the ticket cache. Document the random
string in the default ticket cache name in the man page. Thanks,
Steinar H. Gunderson. (Closes: #295027)
* Really remove stray ex.doc-base.package file.
Files:
bc44d28faad1d1a9a2cae840997bbcd2 690 net optional libpam-krb5_1.0-11.dsc
c6fc4398390261ed26d83ad1b7026eb2 34526 net optional libpam-krb5_1.0-11.diff.gz
19a1da4baf851108463400d7162e8110 23050 net optional
libpam-krb5_1.0-11_powerpc.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
iD8DBQFCXZp4/I12czyGJg8RAg7GAKDmeLaZn/qkgjkKSD6886P0EhcIiACfbaxC
6uBtv/Sw6iAw569IlfWh6uU=
=HrXU
-----END PGP SIGNATURE-----
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
