I have been made aware of a bug in the krb5-1.5 version of the GSSAPI library. This bug causes "g_initialize.c:97: gss_release_oid: Assertion `(&(&_m->os)->n)->initialized == K5_MUTEX_DEBUG_INITIALIZED' failed." crashes in the UW imapd and ipop3d servers that are built with this version of Kerberos, e.g.,

% telnet localhost pop3
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
ipop3d: g_initialize.c:97: gss_release_oid: Assertion 
`(&(&_m->os)->n)->initialized == K5_MUTEX_DEBUG_INITIALIZED' failed.
Connection closed by foreign host.
%

This is not a UW imapd bug; it is a bug in Kerberos internals in 1.5. The Kerberos developers have acknowledged it, and produced the patch listed below to the Kerberos 1.5 sources. This fix will be in krb5-1.5.1. Hopefully, this posting may save other sites from the problem.

This problem is specific to krb5-1.5 and does NOT affect earlier versions of Kerberos.

Index: src/lib/gssapi/mechglue/g_initialize.c
===================================================================
--- src/lib/gssapi/mechglue/g_initialize.c      (revision 18396)
+++ src/lib/gssapi/mechglue/g_initialize.c      (revision 18397)
@@ -89,6 +89,9 @@
        OM_uint32 major;
        gss_mech_info aMech;

+       if (gssint_initialize_library())
+               return GSS_S_FAILURE;
+
        if (minor_status == NULL)
                return (GSS_S_CALL_INACCESSIBLE_WRITE);

-- Mark --

http://staff.washington.edu/mrc
Science does not emerge from voting, party politics, or public debate.
Si vis pacem, para bellum.
_______________________________________________
Imap-uw mailing list
[email protected]
https://mailman1.u.washington.edu/mailman/listinfo/imap-uw

Reply via email to