Your message dated Sat, 10 Jan 2015 23:18:49 +0000
with message-id <[email protected]>
and subject line Bug#746486: fixed in heimdal 1.6~rc2+dfsg-9
has caused the Debian Bug report #746486,
regarding heimdal-kdc leaks memory.
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
746486: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746486
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: heimdal-kdc
Version: 1.6~git20120403+dfsg1-2+iig3
Severity: important
-- System Information:
Debian Release: 7.4
APT prefers stable
APT policy: (600, 'stable'), (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 3.2.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
We use heimdal kdc to authenticate more than 30k users in multiple services.
After upgrading from squeeze to wheezy the KDC process started to leak memory
(~2GiB/week). We don't use the binary package of wheezy, but source package is
rebuilt with a little patch enabling impersonation of other pricipals. It is
belived that this should not cause the problem.
We had it run under valgrind for some hours, the output is attached.
Our patch in importable with quilt import also attached.
==6018== Memcheck, a memory error detector
==6018== Copyright (C) 2002-2011, and GNU GPL'd, by Julian Seward et al.
==6018== Using Valgrind-3.7.0 and LibVEX; rerun with -h for copyright info
==6018== Command: /usr/lib/heimdal-servers/kdc --no-detach
==6018== Parent PID: 5344
==6018==
==6018==
==6018== HEAP SUMMARY:
==6018== in use at exit: 28,763,436 bytes in 224,712 blocks
==6018== total heap usage: 124,988,168 allocs, 124,763,456 frees,
167,086,952,375 bytes allocated
==6018==
==6018== 4 bytes in 2 blocks are indirectly lost in loss record 1 of 38
==6018== at 0x4C28BED: malloc (vg_replace_malloc.c:263)
==6018== by 0x52BEF34: krb5_kt_ret_string (keytab_file.c:82)
==6018== by 0x52BF18D: fkt_next_entry_int.isra.4 (keytab_file.c:230)
==6018== by 0x5064D1F: hdb_read_master_key (mkey.c:128)
==6018== by 0x5065550: hdb_set_master_keyfile (mkey.c:723)
==6018== by 0x4E3BA47: krb5_kdc_set_dbinfo (set_dbinfo.c:59)
==6018== by 0x4048D0: configure (config.c:208)
==6018== by 0x402995: main (main.c:125)
==6018==
==6018== 8 bytes in 1 blocks are indirectly lost in loss record 2 of 38
==6018== at 0x4C28BED: malloc (vg_replace_malloc.c:263)
==6018== by 0x4C28D6F: realloc (vg_replace_malloc.c:632)
==6018== by 0x4E3B9F5: krb5_kdc_set_dbinfo (set_dbinfo.c:45)
==6018== by 0x4048D0: configure (config.c:208)
==6018== by 0x402995: main (main.c:125)
==6018==
==6018== 8 bytes in 1 blocks are indirectly lost in loss record 3 of 38
==6018== at 0x4C28BED: malloc (vg_replace_malloc.c:263)
==6018== by 0x52BEF34: krb5_kt_ret_string (keytab_file.c:82)
==6018== by 0x52BF094: fkt_next_entry_int.isra.4 (keytab_file.c:215)
==6018== by 0x5064D1F: hdb_read_master_key (mkey.c:128)
==6018== by 0x5065550: hdb_set_master_keyfile (mkey.c:723)
==6018== by 0x4E3BA47: krb5_kdc_set_dbinfo (set_dbinfo.c:59)
==6018== by 0x4048D0: configure (config.c:208)
==6018== by 0x402995: main (main.c:125)
==6018==
==6018== 16 bytes in 1 blocks are indirectly lost in loss record 4 of 38
==6018== at 0x4C272B8: calloc (vg_replace_malloc.c:566)
==6018== by 0x52BF141: fkt_next_entry_int.isra.4 (keytab_file.c:222)
==6018== by 0x5064D1F: hdb_read_master_key (mkey.c:128)
==6018== by 0x5065550: hdb_set_master_keyfile (mkey.c:723)
==6018== by 0x4E3BA47: krb5_kdc_set_dbinfo (set_dbinfo.c:59)
==6018== by 0x4048D0: configure (config.c:208)
==6018== by 0x402995: main (main.c:125)
==6018==
==6018== 16 bytes in 1 blocks are indirectly lost in loss record 5 of 38
==6018== at 0x4C272B8: calloc (vg_replace_malloc.c:566)
==6018== by 0x52A5F76: _key_schedule (crypto.c:149)
==6018== by 0x52A7725: krb5_decrypt_ivec (crypto.c:1030)
==6018== by 0x52A7A20: krb5_decrypt (crypto.c:1829)
==6018== by 0x5064ED9: hdb_unseal_key_mkey (mkey.c:424)
==6018== by 0x5065014: hdb_unseal_keys_mkey (mkey.c:467)
==6018== by 0x505B6FF: _hdb_fetch_kvno (common.c:174)
==6018== by 0x4E4AC01: _kdc_db_fetch (misc.c:94)
==6018== by 0x4E41B1B: _kdc_as_rep (kerberos5.c:1660)
==6018== by 0x4E4BF03: kdc_as_req (process.c:77)
==6018== by 0x4E4C024: krb5_kdc_process_request (process.c:208)
==6018== by 0x4030AE: do_request (connect.c:431)
==6018==
==6018== 16 bytes in 1 blocks are indirectly lost in loss record 6 of 38
==6018== at 0x4C272B8: calloc (vg_replace_malloc.c:566)
==6018== by 0x52A5F76: _key_schedule (crypto.c:149)
==6018== by 0x52A6C97: verify_checksum (crypto.c:479)
==6018== by 0x52A77AD: krb5_decrypt_ivec (crypto.c:1045)
==6018== by 0x52A7A20: krb5_decrypt (crypto.c:1829)
==6018== by 0x5064ED9: hdb_unseal_key_mkey (mkey.c:424)
==6018== by 0x5065014: hdb_unseal_keys_mkey (mkey.c:467)
==6018== by 0x505B6FF: _hdb_fetch_kvno (common.c:174)
==6018== by 0x4E4AC01: _kdc_db_fetch (misc.c:94)
==6018== by 0x4E41B1B: _kdc_as_rep (kerberos5.c:1660)
==6018== by 0x4E4BF03: kdc_as_req (process.c:77)
==6018== by 0x4E4C024: krb5_kdc_process_request (process.c:208)
==6018==
==6018== 24 bytes in 1 blocks are indirectly lost in loss record 7 of 38
==6018== at 0x4C272B8: calloc (vg_replace_malloc.c:566)
==6018== by 0x52BD536: krb5_copy_keyblock (keyblock.c:137)
==6018== by 0x52A89E1: krb5_crypto_init (crypto.c:2057)
==6018== by 0x5064CFA: hdb_read_master_key (mkey.c:136)
==6018== by 0x5065550: hdb_set_master_keyfile (mkey.c:723)
==6018== by 0x4E3BA47: krb5_kdc_set_dbinfo (set_dbinfo.c:59)
==6018== by 0x4048D0: configure (config.c:208)
==6018== by 0x402995: main (main.c:125)
==6018==
==6018== 24 bytes in 1 blocks are indirectly lost in loss record 8 of 38
==6018== at 0x4C272B8: calloc (vg_replace_malloc.c:566)
==6018== by 0x52BD536: krb5_copy_keyblock (keyblock.c:137)
==6018== by 0x52A69C6: _get_derived_key (crypto.c:2005)
==6018== by 0x52A7704: krb5_decrypt_ivec (crypto.c:1025)
==6018== by 0x52A7A20: krb5_decrypt (crypto.c:1829)
==6018== by 0x5064ED9: hdb_unseal_key_mkey (mkey.c:424)
==6018== by 0x5065014: hdb_unseal_keys_mkey (mkey.c:467)
==6018== by 0x505B6FF: _hdb_fetch_kvno (common.c:174)
==6018== by 0x4E4AC01: _kdc_db_fetch (misc.c:94)
==6018== by 0x4E41B1B: _kdc_as_rep (kerberos5.c:1660)
==6018== by 0x4E4BF03: kdc_as_req (process.c:77)
==6018== by 0x4E4C024: krb5_kdc_process_request (process.c:208)
==6018==
==6018== 24 bytes in 1 blocks are indirectly lost in loss record 9 of 38
==6018== at 0x4C272B8: calloc (vg_replace_malloc.c:566)
==6018== by 0x52BD536: krb5_copy_keyblock (keyblock.c:137)
==6018== by 0x52A69C6: _get_derived_key (crypto.c:2005)
==6018== by 0x52A6AA7: get_checksum_key.isra.10 (crypto.c:323)
==6018== by 0x52A6C97: verify_checksum (crypto.c:479)
==6018== by 0x52A77AD: krb5_decrypt_ivec (crypto.c:1045)
==6018== by 0x52A7A20: krb5_decrypt (crypto.c:1829)
==6018== by 0x5064ED9: hdb_unseal_key_mkey (mkey.c:424)
==6018== by 0x5065014: hdb_unseal_keys_mkey (mkey.c:467)
==6018== by 0x505B6FF: _hdb_fetch_kvno (common.c:174)
==6018== by 0x4E4AC01: _kdc_db_fetch (misc.c:94)
==6018== by 0x4E41B1B: _kdc_as_rep (kerberos5.c:1660)
==6018==
==6018== 29 bytes in 1 blocks are indirectly lost in loss record 10 of 38
==6018== at 0x4C28BED: malloc (vg_replace_malloc.c:263)
==6018== by 0x685FC41: strdup (strdup.c:43)
==6018== by 0x505C70D: hdb_db_create (db3.c:368)
==6018== by 0x5060B9C: hdb_create (hdb.c:513)
==6018== by 0x4E3BA18: krb5_kdc_set_dbinfo (set_dbinfo.c:52)
==6018== by 0x4048D0: configure (config.c:208)
==6018== by 0x402995: main (main.c:125)
==6018==
==6018== 30 bytes in 1 blocks are still reachable in loss record 11 of 38
==6018== at 0x4C28BED: malloc (vg_replace_malloc.c:263)
==6018== by 0x68CF387: __vasprintf_chk (vasprintf_chk.c:82)
==6018== by 0x68CF222: __asprintf_chk (asprintf_chk.c:34)
==6018== by 0x404BD9: configure (stdio2.h:158)
==6018== by 0x402995: main (main.c:125)
==6018==
==6018== 32 bytes in 1 blocks are possibly lost in loss record 12 of 38
==6018== at 0x4C28BED: malloc (vg_replace_malloc.c:263)
==6018== by 0x7CFFC29: heim_dict_set_value (dict.c:224)
==6018== by 0x52DB988: _krb5_load_plugins (plugin.c:447)
==6018== by 0x7D0032F: heim_base_once_f (heimbase.c:379)
==6018== by 0x52A4D1A: krb5_init_context (context.c:423)
==6018== by 0x402957: main (main.c:115)
==6018==
==6018== 32 bytes in 1 blocks are indirectly lost in loss record 13 of 38
==6018== at 0x4C272B8: calloc (vg_replace_malloc.c:566)
==6018== by 0x52BF039: fkt_next_entry_int.isra.4 (keytab_file.c:190)
==6018== by 0x5064D1F: hdb_read_master_key (mkey.c:128)
==6018== by 0x5065550: hdb_set_master_keyfile (mkey.c:723)
==6018== by 0x4E3BA47: krb5_kdc_set_dbinfo (set_dbinfo.c:59)
==6018== by 0x4048D0: configure (config.c:208)
==6018== by 0x402995: main (main.c:125)
==6018==
==6018== 32 bytes in 1 blocks are indirectly lost in loss record 14 of 38
==6018== at 0x4C28BED: malloc (vg_replace_malloc.c:263)
==6018== by 0x52BF337: fkt_next_entry_int.isra.4 (keytab_file.c:61)
==6018== by 0x5064D1F: hdb_read_master_key (mkey.c:128)
==6018== by 0x5065550: hdb_set_master_keyfile (mkey.c:723)
==6018== by 0x4E3BA47: krb5_kdc_set_dbinfo (set_dbinfo.c:59)
==6018== by 0x4048D0: configure (config.c:208)
==6018== by 0x402995: main (main.c:125)
==6018==
==6018== 32 bytes in 1 blocks are indirectly lost in loss record 15 of 38
==6018== at 0x4C28BED: malloc (vg_replace_malloc.c:263)
==6018== by 0x57BCA26: der_copy_octet_string (der_copy.c:152)
==6018== by 0x577B38C: copy_EncryptionKey (asn1_krb5_asn1.c:3215)
==6018== by 0x52BD54C: krb5_copy_keyblock (keyblock.c:143)
==6018== by 0x52A89E1: krb5_crypto_init (crypto.c:2057)
==6018== by 0x5064CFA: hdb_read_master_key (mkey.c:136)
==6018== by 0x5065550: hdb_set_master_keyfile (mkey.c:723)
==6018== by 0x4E3BA47: krb5_kdc_set_dbinfo (set_dbinfo.c:59)
==6018== by 0x4048D0: configure (config.c:208)
==6018== by 0x402995: main (main.c:125)
==6018==
==6018== 32 bytes in 1 blocks are indirectly lost in loss record 16 of 38
==6018== at 0x4C28BED: malloc (vg_replace_malloc.c:263)
==6018== by 0x57BCA26: der_copy_octet_string (der_copy.c:152)
==6018== by 0x577B38C: copy_EncryptionKey (asn1_krb5_asn1.c:3215)
==6018== by 0x52BD54C: krb5_copy_keyblock (keyblock.c:143)
==6018== by 0x52A69C6: _get_derived_key (crypto.c:2005)
==6018== by 0x52A7704: krb5_decrypt_ivec (crypto.c:1025)
==6018== by 0x52A7A20: krb5_decrypt (crypto.c:1829)
==6018== by 0x5064ED9: hdb_unseal_key_mkey (mkey.c:424)
==6018== by 0x5065014: hdb_unseal_keys_mkey (mkey.c:467)
==6018== by 0x505B6FF: _hdb_fetch_kvno (common.c:174)
==6018== by 0x4E4AC01: _kdc_db_fetch (misc.c:94)
==6018== by 0x4E41B1B: _kdc_as_rep (kerberos5.c:1660)
==6018==
==6018== 32 bytes in 1 blocks are indirectly lost in loss record 17 of 38
==6018== at 0x4C28BED: malloc (vg_replace_malloc.c:263)
==6018== by 0x57BCA26: der_copy_octet_string (der_copy.c:152)
==6018== by 0x577B38C: copy_EncryptionKey (asn1_krb5_asn1.c:3215)
==6018== by 0x52BD54C: krb5_copy_keyblock (keyblock.c:143)
==6018== by 0x52A69C6: _get_derived_key (crypto.c:2005)
==6018== by 0x52A6AA7: get_checksum_key.isra.10 (crypto.c:323)
==6018== by 0x52A6C97: verify_checksum (crypto.c:479)
==6018== by 0x52A77AD: krb5_decrypt_ivec (crypto.c:1045)
==6018== by 0x52A7A20: krb5_decrypt (crypto.c:1829)
==6018== by 0x5064ED9: hdb_unseal_key_mkey (mkey.c:424)
==6018== by 0x5065014: hdb_unseal_keys_mkey (mkey.c:467)
==6018== by 0x505B6FF: _hdb_fetch_kvno (common.c:174)
==6018==
==6018== 40 bytes in 1 blocks are indirectly lost in loss record 18 of 38
==6018== at 0x4C272B8: calloc (vg_replace_malloc.c:566)
==6018== by 0x52A8987: krb5_crypto_init (crypto.c:2037)
==6018== by 0x5064CFA: hdb_read_master_key (mkey.c:136)
==6018== by 0x5065550: hdb_set_master_keyfile (mkey.c:723)
==6018== by 0x4E3BA47: krb5_kdc_set_dbinfo (set_dbinfo.c:59)
==6018== by 0x4048D0: configure (config.c:208)
==6018== by 0x402995: main (main.c:125)
==6018==
==6018== 48 bytes in 1 blocks are still reachable in loss record 19 of 38
==6018== at 0x4C28CCE: realloc (vg_replace_malloc.c:632)
==6018== by 0x402D80: add_port (connect.c:74)
==6018== by 0x4031AB: add_standard_ports.isra.1 (connect.c:132)
==6018== by 0x4033E5: loop (connect.c:165)
==6018== by 0x402AD9: main (main.c:167)
==6018==
==6018== 48 bytes in 1 blocks are indirectly lost in loss record 20 of 38
==6018== at 0x4C28CCE: realloc (vg_replace_malloc.c:632)
==6018== by 0x52A57C2: _new_derived_key.isra.8 (crypto.c:1944)
==6018== by 0x52A69AF: _get_derived_key (crypto.c:2000)
==6018== by 0x52A6AA7: get_checksum_key.isra.10 (crypto.c:323)
==6018== by 0x52A6C97: verify_checksum (crypto.c:479)
==6018== by 0x52A77AD: krb5_decrypt_ivec (crypto.c:1045)
==6018== by 0x52A7A20: krb5_decrypt (crypto.c:1829)
==6018== by 0x5064ED9: hdb_unseal_key_mkey (mkey.c:424)
==6018== by 0x5065014: hdb_unseal_keys_mkey (mkey.c:467)
==6018== by 0x505B6FF: _hdb_fetch_kvno (common.c:174)
==6018== by 0x4E4AC01: _kdc_db_fetch (misc.c:94)
==6018== by 0x4E41B1B: _kdc_as_rep (kerberos5.c:1660)
==6018==
==6018== 56 bytes in 1 blocks are still reachable in loss record 21 of 38
==6018== at 0x4C272B8: calloc (vg_replace_malloc.c:566)
==6018== by 0x7D003CE: autorel_tls (heimbase.c:472)
==6018== by 0x7D00927: heim_auto_release_create (heimbase.c:544)
==6018== by 0x4E4BFBA: krb5_kdc_process_request (process.c:202)
==6018== by 0x4030AE: do_request (connect.c:431)
==6018== by 0x403CC1: loop (connect.c:489)
==6018== by 0x402AD9: main (main.c:167)
==6018==
==6018== 69 bytes in 1 blocks are possibly lost in loss record 22 of 38
==6018== at 0x4C272B8: calloc (vg_replace_malloc.c:566)
==6018== by 0x7D00251: _heim_alloc_object (heimbase.c:333)
==6018== by 0x7D02978: heim_string_create_with_bytes (string.c:154)
==6018== by 0x52DB766: _krb5_load_plugins (plugin.c:422)
==6018== by 0x7D0032F: heim_base_once_f (heimbase.c:379)
==6018== by 0x52A4D1A: krb5_init_context (context.c:423)
==6018== by 0x402957: main (main.c:115)
==6018==
==6018== 72 bytes in 1 blocks are indirectly lost in loss record 23 of 38
==6018== at 0x4C272B8: calloc (vg_replace_malloc.c:566)
==6018== by 0x5064C9E: hdb_read_master_key (mkey.c:129)
==6018== by 0x5065550: hdb_set_master_keyfile (mkey.c:723)
==6018== by 0x4E3BA47: krb5_kdc_set_dbinfo (set_dbinfo.c:59)
==6018== by 0x4048D0: configure (config.c:208)
==6018== by 0x402995: main (main.c:125)
==6018==
==6018== 80 bytes in 1 blocks are possibly lost in loss record 24 of 38
==6018== at 0x4C272B8: calloc (vg_replace_malloc.c:566)
==6018== by 0x7D00251: _heim_alloc_object (heimbase.c:333)
==6018== by 0x7CFFA89: heim_dict_create (dict.c:117)
==6018== by 0x52DB93D: _krb5_load_plugins (plugin.c:432)
==6018== by 0x7D0032F: heim_base_once_f (heimbase.c:379)
==6018== by 0x52A4D1A: krb5_init_context (context.c:423)
==6018== by 0x402957: main (main.c:115)
==6018==
==6018== 80 bytes in 1 blocks are possibly lost in loss record 25 of 38
==6018== at 0x4C272B8: calloc (vg_replace_malloc.c:566)
==6018== by 0x7D00251: _heim_alloc_object (heimbase.c:333)
==6018== by 0x7CFFA89: heim_dict_create (dict.c:117)
==6018== by 0x52DB96E: _krb5_load_plugins (plugin.c:441)
==6018== by 0x7D0032F: heim_base_once_f (heimbase.c:379)
==6018== by 0x52A4D1A: krb5_init_context (context.c:423)
==6018== by 0x402957: main (main.c:115)
==6018==
==6018== 88 bytes in 1 blocks are possibly lost in loss record 26 of 38
==6018== at 0x4C272B8: calloc (vg_replace_malloc.c:566)
==6018== by 0x7CFFAF6: heim_dict_create (dict.c:125)
==6018== by 0x52DB93D: _krb5_load_plugins (plugin.c:432)
==6018== by 0x7D0032F: heim_base_once_f (heimbase.c:379)
==6018== by 0x52A4D1A: krb5_init_context (context.c:423)
==6018== by 0x402957: main (main.c:115)
==6018==
==6018== 88 bytes in 1 blocks are possibly lost in loss record 27 of 38
==6018== at 0x4C272B8: calloc (vg_replace_malloc.c:566)
==6018== by 0x7CFFAF6: heim_dict_create (dict.c:125)
==6018== by 0x52DB96E: _krb5_load_plugins (plugin.c:441)
==6018== by 0x7D0032F: heim_base_once_f (heimbase.c:379)
==6018== by 0x52A4D1A: krb5_init_context (context.c:423)
==6018== by 0x402957: main (main.c:115)
==6018==
==6018== 224 bytes in 1 blocks are indirectly lost in loss record 28 of 38
==6018== at 0x4C272B8: calloc (vg_replace_malloc.c:566)
==6018== by 0x505C6EF: hdb_db_create (db3.c:361)
==6018== by 0x5060B9C: hdb_create (hdb.c:513)
==6018== by 0x4E3BA18: krb5_kdc_set_dbinfo (set_dbinfo.c:52)
==6018== by 0x4048D0: configure (config.c:208)
==6018== by 0x402995: main (main.c:125)
==6018==
==6018== 244 bytes in 1 blocks are indirectly lost in loss record 29 of 38
==6018== at 0x4C272B8: calloc (vg_replace_malloc.c:566)
==6018== by 0x551987C: hc_EVP_CipherInit_ex (evp.c:783)
==6018== by 0x52AAB6D: _krb5_evp_schedule (crypto-evp.c:47)
==6018== by 0x52A5F9E: _key_schedule (crypto.c:160)
==6018== by 0x52A7725: krb5_decrypt_ivec (crypto.c:1030)
==6018== by 0x52A7A20: krb5_decrypt (crypto.c:1829)
==6018== by 0x5064ED9: hdb_unseal_key_mkey (mkey.c:424)
==6018== by 0x5065014: hdb_unseal_keys_mkey (mkey.c:467)
==6018== by 0x505B6FF: _hdb_fetch_kvno (common.c:174)
==6018== by 0x4E4AC01: _kdc_db_fetch (misc.c:94)
==6018== by 0x4E41B1B: _kdc_as_rep (kerberos5.c:1660)
==6018== by 0x4E4BF03: kdc_as_req (process.c:77)
==6018==
==6018== 244 bytes in 1 blocks are indirectly lost in loss record 30 of 38
==6018== at 0x4C272B8: calloc (vg_replace_malloc.c:566)
==6018== by 0x551987C: hc_EVP_CipherInit_ex (evp.c:783)
==6018== by 0x52A5F9E: _key_schedule (crypto.c:160)
==6018== by 0x52A7725: krb5_decrypt_ivec (crypto.c:1030)
==6018== by 0x52A7A20: krb5_decrypt (crypto.c:1829)
==6018== by 0x5064ED9: hdb_unseal_key_mkey (mkey.c:424)
==6018== by 0x5065014: hdb_unseal_keys_mkey (mkey.c:467)
==6018== by 0x505B6FF: _hdb_fetch_kvno (common.c:174)
==6018== by 0x4E4AC01: _kdc_db_fetch (misc.c:94)
==6018== by 0x4E41B1B: _kdc_as_rep (kerberos5.c:1660)
==6018== by 0x4E4BF03: kdc_as_req (process.c:77)
==6018== by 0x4E4C024: krb5_kdc_process_request (process.c:208)
==6018==
==6018== 244 bytes in 1 blocks are indirectly lost in loss record 31 of 38
==6018== at 0x4C272B8: calloc (vg_replace_malloc.c:566)
==6018== by 0x551987C: hc_EVP_CipherInit_ex (evp.c:783)
==6018== by 0x52AAB6D: _krb5_evp_schedule (crypto-evp.c:47)
==6018== by 0x52A5F9E: _key_schedule (crypto.c:160)
==6018== by 0x52A6C97: verify_checksum (crypto.c:479)
==6018== by 0x52A77AD: krb5_decrypt_ivec (crypto.c:1045)
==6018== by 0x52A7A20: krb5_decrypt (crypto.c:1829)
==6018== by 0x5064ED9: hdb_unseal_key_mkey (mkey.c:424)
==6018== by 0x5065014: hdb_unseal_keys_mkey (mkey.c:467)
==6018== by 0x505B6FF: _hdb_fetch_kvno (common.c:174)
==6018== by 0x4E4AC01: _kdc_db_fetch (misc.c:94)
==6018== by 0x4E41B1B: _kdc_as_rep (kerberos5.c:1660)
==6018==
==6018== 244 bytes in 1 blocks are indirectly lost in loss record 32 of 38
==6018== at 0x4C272B8: calloc (vg_replace_malloc.c:566)
==6018== by 0x551987C: hc_EVP_CipherInit_ex (evp.c:783)
==6018== by 0x52A5F9E: _key_schedule (crypto.c:160)
==6018== by 0x52A6C97: verify_checksum (crypto.c:479)
==6018== by 0x52A77AD: krb5_decrypt_ivec (crypto.c:1045)
==6018== by 0x52A7A20: krb5_decrypt (crypto.c:1829)
==6018== by 0x5064ED9: hdb_unseal_key_mkey (mkey.c:424)
==6018== by 0x5065014: hdb_unseal_keys_mkey (mkey.c:467)
==6018== by 0x505B6FF: _hdb_fetch_kvno (common.c:174)
==6018== by 0x4E4AC01: _kdc_db_fetch (misc.c:94)
==6018== by 0x4E41B1B: _kdc_as_rep (kerberos5.c:1660)
==6018== by 0x4E4BF03: kdc_as_req (process.c:77)
==6018==
==6018== 336 bytes in 1 blocks are indirectly lost in loss record 33 of 38
==6018== at 0x4C28BED: malloc (vg_replace_malloc.c:263)
==6018== by 0x52ABC52: krb5_data_alloc (data.c:102)
==6018== by 0x52A5F8A: _key_schedule (crypto.c:154)
==6018== by 0x52A7725: krb5_decrypt_ivec (crypto.c:1030)
==6018== by 0x52A7A20: krb5_decrypt (crypto.c:1829)
==6018== by 0x5064ED9: hdb_unseal_key_mkey (mkey.c:424)
==6018== by 0x5065014: hdb_unseal_keys_mkey (mkey.c:467)
==6018== by 0x505B6FF: _hdb_fetch_kvno (common.c:174)
==6018== by 0x4E4AC01: _kdc_db_fetch (misc.c:94)
==6018== by 0x4E41B1B: _kdc_as_rep (kerberos5.c:1660)
==6018== by 0x4E4BF03: kdc_as_req (process.c:77)
==6018== by 0x4E4C024: krb5_kdc_process_request (process.c:208)
==6018==
==6018== 336 bytes in 1 blocks are indirectly lost in loss record 34 of 38
==6018== at 0x4C28BED: malloc (vg_replace_malloc.c:263)
==6018== by 0x52ABC52: krb5_data_alloc (data.c:102)
==6018== by 0x52A5F8A: _key_schedule (crypto.c:154)
==6018== by 0x52A6C97: verify_checksum (crypto.c:479)
==6018== by 0x52A77AD: krb5_decrypt_ivec (crypto.c:1045)
==6018== by 0x52A7A20: krb5_decrypt (crypto.c:1829)
==6018== by 0x5064ED9: hdb_unseal_key_mkey (mkey.c:424)
==6018== by 0x5065014: hdb_unseal_keys_mkey (mkey.c:467)
==6018== by 0x505B6FF: _hdb_fetch_kvno (common.c:174)
==6018== by 0x4E4AC01: _kdc_db_fetch (misc.c:94)
==6018== by 0x4E41B1B: _kdc_as_rep (kerberos5.c:1660)
==6018== by 0x4E4BF03: kdc_as_req (process.c:77)
==6018==
==6018== 2,048 bytes in 2 blocks are definitely lost in loss record 35 of 38
==6018== at 0x4C28BED: malloc (vg_replace_malloc.c:263)
==6018== by 0x4C28D6F: realloc (vg_replace_malloc.c:632)
==6018== by 0x404011: loop (connect.c:586)
==6018== by 0x402AD9: main (main.c:167)
==6018==
==6018== 2,545 (184 direct, 2,361 indirect) bytes in 1 blocks are definitely
lost in loss record 36 of 38
==6018== at 0x4C272B8: calloc (vg_replace_malloc.c:566)
==6018== by 0x4E3B31E: krb5_kdc_get_config (default_config.c:45)
==6018== by 0x4048A9: configure (config.c:202)
==6018== by 0x402995: main (main.c:125)
==6018==
==6018== 204,416 bytes in 1,597 blocks are possibly lost in loss record 37 of 38
==6018== at 0x4C272B8: calloc (vg_replace_malloc.c:566)
==6018== by 0x7D00251: _heim_alloc_object (heimbase.c:333)
==6018== by 0x7D00940: heim_auto_release_create (heimbase.c:550)
==6018== by 0x4E4BFBA: krb5_kdc_process_request (process.c:202)
==6018== by 0x4030AE: do_request (connect.c:431)
==6018== by 0x4044C1: loop (connect.c:821)
==6018== by 0x402AD9: main (main.c:167)
==6018==
==6018== 28,553,856 bytes in 223,077 blocks are possibly lost in loss record 38
of 38
==6018== at 0x4C272B8: calloc (vg_replace_malloc.c:566)
==6018== by 0x7D00251: _heim_alloc_object (heimbase.c:333)
==6018== by 0x7D00940: heim_auto_release_create (heimbase.c:550)
==6018== by 0x4E4BFBA: krb5_kdc_process_request (process.c:202)
==6018== by 0x4030AE: do_request (connect.c:431)
==6018== by 0x403CC1: loop (connect.c:489)
==6018== by 0x402AD9: main (main.c:167)
==6018==
==6018== LEAK SUMMARY:
==6018== definitely lost: 2,232 bytes in 3 blocks
==6018== indirectly lost: 2,361 bytes in 26 blocks
==6018== possibly lost: 28,758,709 bytes in 224,680 blocks
==6018== still reachable: 134 bytes in 3 blocks
==6018== suppressed: 0 bytes in 0 blocks
==6018==
==6018== For counts of detected and suppressed errors, rerun with: -v
==6018== ERROR SUMMARY: 10 errors from 10 contexts (suppressed: 14 from 6)
Description: enable s4u in heimdal
TODO: Put a short summary on the line above and replace this paragraph
with a longer explanation of this change. Complete the meta-information
with other relevant fields (see below for details). To make it easier, the
information below has been extracted from the changelog. Adjust it or drop
it.
---
The information above should follow the Patch Tagging Guidelines, please
checkout http://dep.debian.net/deps/dep3/ to learn about the format. Here
are templates for supplementary fields that you might want to add:
Origin: <vendor|upstream|other>, <url of original patch>
Bug: <url in upstream bugtracker>
Bug-Debian: http://bugs.debian.org/<bugnumber>
Bug-Ubuntu: https://launchpad.net/bugs/<bugnumber>
Forwarded: <no|not-needed|url proving that it has been forwarded>
Reviewed-By: <name and email of someone who approved the patch>
Last-Update: <YYYY-MM-DD>
--- heimdal-1.6~git20120403+dfsg1.orig/kdc/krb5tgs.c
+++ heimdal-1.6~git20120403+dfsg1/kdc/krb5tgs.c
@@ -1494,6 +1494,55 @@ eout:
return ENOMEM;
}
+
+/*
+DAVIDT's patch
+cpn is the service, selfcpn is the user it is trying to impersonate*/
+static int _krb5_s4uself_is_allowed(krb5_context context, krb5_kdc_configuration * config, const char * cpn, const char * selfcpn)
+{
+ char** allowed_principals = NULL;
+
+ if((cpn == NULL) || (selfcpn == NULL))
+ {
+ return (0);
+ }
+ else
+ {
+ char ** citem;
+ int matches = 0;
+ size_t s_len = strlen(selfcpn);
+ allowed_principals = krb5_config_get_strings(context, NULL, "kdc", "s4uself_allow", cpn, NULL);
+ if (!allowed_principals)
+ return (0);
+ citem = allowed_principals;
+
+ while (*citem)
+ {
+ char * princ = *citem;
+ size_t p_len = strlen(princ);
+ if( !(p_len>s_len) ) /*p is the length of princ*/
+ {
+ if(strncmp(princ, selfcpn+s_len-p_len, p_len)==0)
+ {
+
+ kdc_log(context, config, 0,
+ "Selfcheck matches on %s selfcpn=%s",
+ selfcpn, princ);
+ krb5_config_free_strings(allowed_principals);
+ return (1);
+ }
+ }
+
+
+ citem++;
+ }
+ krb5_config_free_strings(allowed_principals);
+ }
+ return (0);
+
+}
+
+
static krb5_error_code
tgs_build_reply(krb5_context context,
krb5_kdc_configuration *config,
@@ -2057,9 +2106,24 @@ server_lookup:
* delegation, remove the forward flag.
*/
- if (client->entry.flags.trusted_for_delegation) {
- str = "[forwardable]";
- } else {
+ if (client->entry.flags.trusted_for_delegation ) {
+ if(_krb5_s4uself_is_allowed(context, config, cpn, tpn)){
+ str = "[forwardable]";
+ }
+ else{
+ /*by davidt: check if cpn can impersonate selfcpn (rules in config file)*/
+ kdc_log(context, config, 0,
+ "s4u2self_is_allowed: impersonating %s is not allowed.",
+ tpn);
+
+ /*then set forwardable to 0*/
+ b->kdc_options.forwardable = 0;
+ ret = KRB5KDC_ERR_BADOPTION;
+ goto out; // Do nothing!
+ str = "";
+ }
+ }
+ else {
b->kdc_options.forwardable = 0;
str = "";
}
--- End Message ---
--- Begin Message ---
Source: heimdal
Source-Version: 1.6~rc2+dfsg-9
We believe that the bug you reported is fixed in the latest version of
heimdal, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jelmer Vernooij <[email protected]> (supplier of updated heimdal package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 25 Aug 2014 13:52:44 +0200
Source: heimdal
Binary: heimdal-docs heimdal-kdc heimdal-multidev heimdal-dev heimdal-clients-x
heimdal-clients heimdal-kcm heimdal-servers-x heimdal-servers heimdal-dbg
libheimbase1-heimdal libasn1-8-heimdal libkrb5-26-heimdal libhdb9-heimdal
libkadm5srv8-heimdal libkadm5clnt7-heimdal libgssapi3-heimdal libkafs0-heimdal
libroken18-heimdal libotp0-heimdal libsl0-heimdal libkdc2-heimdal
libhx509-5-heimdal libheimntlm0-heimdal libwind0-heimdal libhcrypto4-heimdal
Architecture: source all amd64
Version: 1.6~rc2+dfsg-9
Distribution: unstable
Urgency: medium
Maintainer: Brian May <[email protected]>
Changed-By: Jelmer Vernooij <[email protected]>
Description:
heimdal-clients - Heimdal Kerberos - clients
heimdal-clients-x - Heimdal Kerberos - X11 client programs
heimdal-dbg - Heimdal Kerberos - debugging symbols
heimdal-dev - Heimdal Kerberos - development files
heimdal-docs - Heimdal Kerberos - documentation
heimdal-kcm - Heimdal Kerberos - KCM daemon
heimdal-kdc - Heimdal Kerberos - key distribution center (KDC)
heimdal-multidev - Heimdal Kerberos - Multi-implementation Development
heimdal-servers - Heimdal Kerberos - server programs
heimdal-servers-x - Heimdal Kerberos - X11 server programs
libasn1-8-heimdal - Heimdal Kerberos - ASN.1 library
libgssapi3-heimdal - Heimdal Kerberos - GSSAPI support library
libhcrypto4-heimdal - Heimdal Kerberos - crypto library
libhdb9-heimdal - Heimdal Kerberos - kadmin server library
libheimbase1-heimdal - Heimdal Kerberos - Base library
libheimntlm0-heimdal - Heimdal Kerberos - NTLM support library
libhx509-5-heimdal - Heimdal Kerberos - X509 support library
libkadm5clnt7-heimdal - Heimdal Kerberos - kadmin client library
libkadm5srv8-heimdal - Libraries for Heimdal Kerberos
libkafs0-heimdal - Heimdal Kerberos - KAFS support library
libkdc2-heimdal - Heimdal Kerberos - KDC support library
libkrb5-26-heimdal - Heimdal Kerberos - libraries
libotp0-heimdal - Heimdal Kerberos - OTP support library
libroken18-heimdal - Heimdal Kerberos - roken support library
libsl0-heimdal - Heimdal Kerberos - SL support library
libwind0-heimdal - Heimdal Kerberos - stringprep implementation
Closes: 746486 759877 768243
Changes:
heimdal (1.6~rc2+dfsg-9) unstable; urgency=medium
.
[ Jelmer Vernooij ]
* Add 051_bug746486-memleak: cherry-pick memory leak fix in KDC from
upstream. Thanks GALAMBOS Daniel. Closes: #746486
* Add Turkish debconf translation. Thanks Mert Dirik. Closes: #759877
.
[ Andreas Beckmann ]
* heimdal-clients.postinst: Cleanup obsolete telnet, rsh and pop
alternatives. (Closes: #768243)
Checksums-Sha1:
21f2ef9e7a367c8c966efbd59f4a823037d53556 3697 heimdal_1.6~rc2+dfsg-9.dsc
a7469334df4e763e2f6c2edf3434e8f1009852a0 70416
heimdal_1.6~rc2+dfsg-9.debian.tar.xz
8ce7f1ad2c741d10e502f6899bf10fcb4cde782e 101870
heimdal-docs_1.6~rc2+dfsg-9_all.deb
41961b65541bc4a902ec720fd77938a98e17c8a7 117374
heimdal-kdc_1.6~rc2+dfsg-9_amd64.deb
3843a855b66558a4c322ccf311cf0560402f778a 1123458
heimdal-multidev_1.6~rc2+dfsg-9_amd64.deb
f2075c2ac7b9458373f2eec76a9ccaa9a21818e8 144464
heimdal-dev_1.6~rc2+dfsg-9_amd64.deb
f20a97f44b1d7c1c78d4fa44e576b0273a8edbf3 58688
heimdal-clients-x_1.6~rc2+dfsg-9_amd64.deb
29005741f741872726f5dcce0e81ad88acad68b0 218846
heimdal-clients_1.6~rc2+dfsg-9_amd64.deb
a0b156d0b8bf05d6eefde4e8e128e2d9f5c7fb56 52216
heimdal-kcm_1.6~rc2+dfsg-9_amd64.deb
809b66bea535b0a7134d0e75cddf96212a75c615 38946
heimdal-servers-x_1.6~rc2+dfsg-9_amd64.deb
0e1a0415238df3e11fe3b37cafaeb6e58eec6daa 86438
heimdal-servers_1.6~rc2+dfsg-9_amd64.deb
87a5f965066a4c1774371f561685a7b6c83cbc16 2700514
heimdal-dbg_1.6~rc2+dfsg-9_amd64.deb
913e5e7f6f0ee9a7ac38d88ad3d1d54bdc1c6511 51720
libheimbase1-heimdal_1.6~rc2+dfsg-9_amd64.deb
c04685bd8b0819b935fc69c44fa9749a0b528285 205014
libasn1-8-heimdal_1.6~rc2+dfsg-9_amd64.deb
c1ba043828f7db6ea570850fe8b85ee345ea38e9 228570
libkrb5-26-heimdal_1.6~rc2+dfsg-9_amd64.deb
b47591b34b842faf7ea8a8108418eebe4709fd88 86204
libhdb9-heimdal_1.6~rc2+dfsg-9_amd64.deb
7c87e20830bd4157c3d49495123951054969f09b 52890
libkadm5srv8-heimdal_1.6~rc2+dfsg-9_amd64.deb
4977d6af30bf78d63b4e26b35cc0ef9aaac1d5fc 41918
libkadm5clnt7-heimdal_1.6~rc2+dfsg-9_amd64.deb
def8c84935c22238b040be4947af0e00765de91e 117790
libgssapi3-heimdal_1.6~rc2+dfsg-9_amd64.deb
6aef5db854ddfb1dd837c1ee268ed18f02fbe3e2 38808
libkafs0-heimdal_1.6~rc2+dfsg-9_amd64.deb
9d030498d6196a7e32d1d70d7d8fe89d5d74db59 62966
libroken18-heimdal_1.6~rc2+dfsg-9_amd64.deb
21e510ec62b244e70920ff2aaa2b1fd3b90261f5 53624
libotp0-heimdal_1.6~rc2+dfsg-9_amd64.deb
6decc07ceb1209eb0bda2c0266093107de0fd54d 35294
libsl0-heimdal_1.6~rc2+dfsg-9_amd64.deb
be9421bc7ad258e2beccedb3ea4e1c6deeeb0df2 78484
libkdc2-heimdal_1.6~rc2+dfsg-9_amd64.deb
89d34514b9aee604264be75a96dacf16c2b96850 130928
libhx509-5-heimdal_1.6~rc2+dfsg-9_amd64.deb
0306c0f5d352f58b942f21642a7b8b3a3ba9c78a 38622
libheimntlm0-heimdal_1.6~rc2+dfsg-9_amd64.deb
ad70fd008b9bc52774caf619714715598449d371 71668
libwind0-heimdal_1.6~rc2+dfsg-9_amd64.deb
84e431612b45ed8d28ccf97ee3c45029982958c8 110126
libhcrypto4-heimdal_1.6~rc2+dfsg-9_amd64.deb
Checksums-Sha256:
38d9c19cda02679ab0a7ca3a10a5356c34fe0c2fc550abdb1990a0c178dcda19 3697
heimdal_1.6~rc2+dfsg-9.dsc
5e05ae0c6723ed02cd9531f1d49cae4bbfde98e756df77578534a75ddaf05600 70416
heimdal_1.6~rc2+dfsg-9.debian.tar.xz
f450a0b097b9ef27e68e10cd12f25d6a127fc1e89e848ee6fdd4a4df84698771 101870
heimdal-docs_1.6~rc2+dfsg-9_all.deb
8922617affda353c7add54179c3377e5eff208c8adebc963f58003eed993276b 117374
heimdal-kdc_1.6~rc2+dfsg-9_amd64.deb
af010b833c7d4b9e5191c4f7137e3a034ec2ed5452d664edc2da6efcdcced466 1123458
heimdal-multidev_1.6~rc2+dfsg-9_amd64.deb
14426f14d75bb95dc82c5b565ee1c6f5673fbdcd0991ae2963b2f4692d70aaf5 144464
heimdal-dev_1.6~rc2+dfsg-9_amd64.deb
9590caad3a486362db28805bc60d9129e0c064fccd0f1553252723641ba8d6b9 58688
heimdal-clients-x_1.6~rc2+dfsg-9_amd64.deb
81147740240063eba2a5be6e028b1f5bef81b3960da21be38a706ffa8e43b829 218846
heimdal-clients_1.6~rc2+dfsg-9_amd64.deb
2799e3e2cf368ae8487f90598a1152d52823295b32d5b4c13a9ad66d66872803 52216
heimdal-kcm_1.6~rc2+dfsg-9_amd64.deb
dfb66643ed0e56b656e6410f31c45a573eb9e08b6f8f5f3959edd4978de2f5c5 38946
heimdal-servers-x_1.6~rc2+dfsg-9_amd64.deb
1efd0db500baaed043c9d7fdb288f52515e81230525a591473f54844b4f503a0 86438
heimdal-servers_1.6~rc2+dfsg-9_amd64.deb
cd64468922a05cf7a90806bc10dadae7bf257949fbab7ebb3f1898fa202010dc 2700514
heimdal-dbg_1.6~rc2+dfsg-9_amd64.deb
5726973ae642b1d5fec142dec8dcf9966d25d70855a30fb6d1fdfa2d2f10d924 51720
libheimbase1-heimdal_1.6~rc2+dfsg-9_amd64.deb
97474888641f1125bb247cc88cd985dd0b6d304b6df7422bf6df6cbde2faa18c 205014
libasn1-8-heimdal_1.6~rc2+dfsg-9_amd64.deb
989a195c5c230941bd0e490ad08502ffafb19c311bb184b2f857c58b393f3b72 228570
libkrb5-26-heimdal_1.6~rc2+dfsg-9_amd64.deb
0cf212882f3421ad4ff00b28632c1a17d5d0a4072f195389d0084c862045d75e 86204
libhdb9-heimdal_1.6~rc2+dfsg-9_amd64.deb
0c5262edf92a1dfa675673d4838e8c4175cffe066bd4ef5f3bb0f55f34479a7c 52890
libkadm5srv8-heimdal_1.6~rc2+dfsg-9_amd64.deb
d4be3b47fb00e21aa9d75ff759268dcf3b9af6cfcf983738e19e803277841573 41918
libkadm5clnt7-heimdal_1.6~rc2+dfsg-9_amd64.deb
40292064339e9e2d90e2562ed03755f7bfe9b8be6225f14bf70d0eb26edb99a3 117790
libgssapi3-heimdal_1.6~rc2+dfsg-9_amd64.deb
c69d06540eef75942aedc0a6d0e5522d6aaa3a5e4dfed684bda275f494176672 38808
libkafs0-heimdal_1.6~rc2+dfsg-9_amd64.deb
3989be6d4aebae6854b72a4d853029963b8938391b8b852c968e7f1cd58ece7a 62966
libroken18-heimdal_1.6~rc2+dfsg-9_amd64.deb
b924c028db01d01269516a73a2c236a487b7cfe54991cdf27ad098ec704b68f7 53624
libotp0-heimdal_1.6~rc2+dfsg-9_amd64.deb
312d9b8e1ea6ebdec294a4861dddf3774a9c0c116767abeba380f33e2ac7e193 35294
libsl0-heimdal_1.6~rc2+dfsg-9_amd64.deb
152938dad721058ca0ab0a214ec3f68cded6f0f59afd0979fb623a8668ebf99b 78484
libkdc2-heimdal_1.6~rc2+dfsg-9_amd64.deb
a878a05285207290b5f0ae13069d8bef8a4101fbc2081cfd1cf80eadd683f769 130928
libhx509-5-heimdal_1.6~rc2+dfsg-9_amd64.deb
475402c482f213d0fd68fb9938827c7dccb544656807da57142447f69b4c342d 38622
libheimntlm0-heimdal_1.6~rc2+dfsg-9_amd64.deb
9b436801cf2c84f3ca5b7e83068dfcaba11f5e49467775d2a4d4be6f2438e43f 71668
libwind0-heimdal_1.6~rc2+dfsg-9_amd64.deb
1ef9f797574ceeb66d6672219822637d69e12d52310e591996ceafbc6b97af3c 110126
libhcrypto4-heimdal_1.6~rc2+dfsg-9_amd64.deb
Files:
4372052aa340713964a553a0545a9811 3697 net optional heimdal_1.6~rc2+dfsg-9.dsc
6038d85e970015875223fbd0aa53b2d5 70416 net optional
heimdal_1.6~rc2+dfsg-9.debian.tar.xz
f2b159c62577c278dc7a4fc7e6fc9759 101870 doc extra
heimdal-docs_1.6~rc2+dfsg-9_all.deb
9940ceb7c5c8fb0b1de8b13ae3fdb0bb 117374 net extra
heimdal-kdc_1.6~rc2+dfsg-9_amd64.deb
fe395c97db9ff4b42bb5880aed7121b4 1123458 devel extra
heimdal-multidev_1.6~rc2+dfsg-9_amd64.deb
2ba931e19b7d93dadff82bf9a2227ced 144464 devel extra
heimdal-dev_1.6~rc2+dfsg-9_amd64.deb
422080d5ffd0971fba7d25c16a246055 58688 net extra
heimdal-clients-x_1.6~rc2+dfsg-9_amd64.deb
7d4cdab91482d91151c7060664591af0 218846 net extra
heimdal-clients_1.6~rc2+dfsg-9_amd64.deb
2372647658120d46c6d796fb2b56d5ae 52216 net extra
heimdal-kcm_1.6~rc2+dfsg-9_amd64.deb
e24be07f107dd52fe9a6c1f7a761e9a6 38946 net extra
heimdal-servers-x_1.6~rc2+dfsg-9_amd64.deb
666e573b977e792f005dca6f5298a7d8 86438 net extra
heimdal-servers_1.6~rc2+dfsg-9_amd64.deb
82ed3cf4b98ed2bb20e1a4e44571ca53 2700514 debug extra
heimdal-dbg_1.6~rc2+dfsg-9_amd64.deb
d9ccae344021a6789d4da2fe4233d968 51720 libs optional
libheimbase1-heimdal_1.6~rc2+dfsg-9_amd64.deb
b0e238a03784a4d25c34f4f61ab36034 205014 libs optional
libasn1-8-heimdal_1.6~rc2+dfsg-9_amd64.deb
7587f8dd9b182196ee852aa2b851a078 228570 libs optional
libkrb5-26-heimdal_1.6~rc2+dfsg-9_amd64.deb
a6658990a27fa970cdfc72359e6bb5bb 86204 libs optional
libhdb9-heimdal_1.6~rc2+dfsg-9_amd64.deb
d423bcd2f0a4caa809e2de93ad58be35 52890 libs optional
libkadm5srv8-heimdal_1.6~rc2+dfsg-9_amd64.deb
c1e67653c2a1b009ba02824d3ce3d04e 41918 libs optional
libkadm5clnt7-heimdal_1.6~rc2+dfsg-9_amd64.deb
6e5c338992759a3839edb2be0d022539 117790 libs optional
libgssapi3-heimdal_1.6~rc2+dfsg-9_amd64.deb
b5302df1a376614252c7be6b0cebecec 38808 libs extra
libkafs0-heimdal_1.6~rc2+dfsg-9_amd64.deb
5e24d8d4b52b52fb50452144632bb23e 62966 libs optional
libroken18-heimdal_1.6~rc2+dfsg-9_amd64.deb
7cb6ab7a3fde3fbb204a959164990d5a 53624 libs extra
libotp0-heimdal_1.6~rc2+dfsg-9_amd64.deb
8083c917a974be75825d1734942fea28 35294 libs extra
libsl0-heimdal_1.6~rc2+dfsg-9_amd64.deb
17f1133643def3567029266a83de8c76 78484 libs extra
libkdc2-heimdal_1.6~rc2+dfsg-9_amd64.deb
6ce3bb647cc65075e74c7f479653d10e 130928 libs optional
libhx509-5-heimdal_1.6~rc2+dfsg-9_amd64.deb
d07961c9a7a7e00901317e2e38b98555 38622 libs optional
libheimntlm0-heimdal_1.6~rc2+dfsg-9_amd64.deb
551938c74a8f4fbb8bb4ac6bc2858545 71668 libs optional
libwind0-heimdal_1.6~rc2+dfsg-9_amd64.deb
f1c594e0eb81a4af00a1aab75dcafd41 110126 libs optional
libhcrypto4-heimdal_1.6~rc2+dfsg-9_amd64.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=F43D
-----END PGP SIGNATURE-----
--- End Message ---
