Try compiling the adapter and using it instead of the /usr/local/lib/libgssapi_krb5.so in the "-l" option to your call to gsstest.
krb5-1.3.5 and krb5-1.3.6 (with the adapter) worked well for me. As I didn't try further releases of krb5, I can't say anything about their behavior. I'd be interested in the outcome of this investigation. Mit freundlichen Grüßen / Best regards Calin Barbat -----Ursprüngliche Nachricht----- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Christoph Weizen Gesendet: Montag, 19. September 2005 18:50 An: [email protected] Betreff: Core Dump with gsstest-1.26 and krb5-1.4.2 Hi list, I experimentize with kerberos, sncadapt and gsstest to maybe get Single Sign-On work with a Windows Client (SAPGUI) to a Unix/Linux (SAP) Server. So I compiled krb5-1.4.2 (./configure --enable-shared) and gsstest-1.26. kinit and klist works. But when running gsstest I get a core dump. $ ./gsstest -l /usr/local/lib/libgssapi_krb5.so -d 4 -p out.txt Sending verbose output to file "out.txt" Segmentation fault (core dumped) $ gdb ./gsstest core [...] #0 krb5_copy_principal (context=0x2f800001, inprinc=0xfeab2b4, outprinc=0xffffe03c) at copy_princ.c:61 61 unsigned int len = krb5_princ_component(context, inprinc, i)->length I'm testig on a OpenPower 720 with SuSE Enterprise Linux 9 ppc. Did I something wrong? Head of out.txt ************************************************************************** *** *** *** "gsstest" -- GSS-API v2 Shared Library API Test Program *** *** *** *** Version 1.26 03-Sep-2002 *** *** *** *** This implementation is Copyright (c), 1998 SAP AG Walldorf *** *** *** ************************************************************************** *** This tool may be freely used to test functionality and *** *** robustness of GSS-API v2 mechanism implemenations *** ************************************************************************** *** THIS SOFTWARE IS PROVIDED BY SAP AG ``AS IS'' AND ANY EXPRESSED *** *** OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE *** *** IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR *** *** PURPOSE ARE DISCLAIMED. SAP AG SHALL BE LIABLE FOR ANY DAMAGES *** *** ARISING OUT OF THE USE OF THIS SOFTWARE ONLY IF CAUSED BY SAP AG'S *** *** INTENT OR GROSS NEGLIGENCE. IN CASE SAP AG IS LIABLE UNDER THIS *** *** AGREEMENT FOR DAMAGES CAUSED BY SAP AG'S GROSS NEGLIGENCE SAP AG *** *** FURTHER SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, *** *** EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,*** *** PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, *** *** OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY *** *** THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, *** *** OR TORT, AND SHALL NOT BE LIABLE IN EXCESS OF THE AMOUNT OF *** *** DAMAGES TYPICALLY FORESEEABLE FOR SAP AG, WHICH SHALL IN NO EVENT *** *** EXCEED US$ 500.000.- *** ************************************************************************** Timer resolution of gettimeofday() is (at least) 0.001 millisec 1 second passed in 999.999 millisec. ===================================================================== Current Date&Time : Mon, 19-Sep-2005 14:01:36 GMT -02:00 Operating System : Linux -Release : 2.6.5-7.191-pseries64 Hardware/Machine : ppc64 scalar C-types : void* ptrdiff_t size_t time_t long int wchar_t char (sizes in bits) : 32 32s 32u 32s 32s 32s 32s 8u Perf-Index (p-90) : dbg= 6.80 (opt= 3.60) Timer Resolution : 0.001 millisec using "gettimeofday()" Hostname : rliss002 Current user : root ===================================================================== Loading GSS-API shared library #1 "/usr/local/lib/libgssapi_krb5.so" ... Resolving SAP SNC-Adapter functions ... GSS-API v2 "sapsnc_init_adapter" ( opt. ) (missing) GSS-API v2 "sapsnc_export_cname_blob" ( opt. ) (missing) GSS-API v2 "sapsnc_import_cname_blob" ( opt. ) (missing) Resolving Misc Support functions ... GSS-API v1 "gss_indicate_mechs" (REQUIRED ) ok. GSS-API v1 "gss_display_status" (REQUIRED ) ok. GSS-API v1 "gss_release_buffer" (REQUIRED ) ok. GSS-API v1 "gss_release_oid_set" (REQUIRED ) ok. GSS-API v2 "gss_inquire_names_for_mech" (requested) ok. GSS-API v2 "gss_create_empty_oid_set" ( opt. ) ok. GSS-API v2 "gss_add_oid_set_member" ( opt. ) ok. GSS-API v2 "gss_test_oid_set_member" ( opt. ) ok. Resolving Names management functions ... GSS-API v1 "gss_compare_name" (REQUIRED ) ok. GSS-API v1 "gss_display_name" (REQUIRED ) ok. GSS-API v1 "gss_import_name" (REQUIRED ) ok. GSS-API v1 "gss_release_name" (REQUIRED ) ok. GSS-API v2 "gss_canonicalize_name" (requested) ok. GSS-API v2 "gss_export_name" (requested) ok. GSS-API v2 "gss_duplicate_name" ( opt. ) ok. GSS-API v2 "gss_inquire_mechs_for_name" ( opt. ) (missing) Resolving Credentials management functions ... GSS-API v1 "gss_acquire_cred" (REQUIRED ) ok. GSS-API v1 "gss_release_cred" (REQUIRED ) ok. GSS-API v1 "gss_inquire_cred" (REQUIRED ) ok. GSS-API v2 "gss_inquire_cred_by_mech" (requested) ok. GSS-API v2 "gss_add_cred" ( opt. ) ok. Resolving Context-level functions ... GSS-API v1 "gss_init_sec_context" (REQUIRED ) ok. GSS-API v1 "gss_accept_sec_context" (REQUIRED ) ok. GSS-API v1 "gss_delete_sec_context" (REQUIRED ) ok. GSS-API v1 "gss_context_time" (REQUIRED ) ok. GSS-API v2 "gss_inquire_context" (REQUIRED ) ok. GSS-API v2 "gss_export_sec_context" (requested) ok. GSS-API v2 "gss_import_sec_context" (requested) ok. GSS-API v2 "gss_wrap_size_limit" (requested) ok. GSS-API v1 "gss_process_context_token" ( opt. ) ok. Resolving V2 message protection functions ... GSS-API v2 "gss_get_mic" (REQUIRED ) ok. GSS-API v2 "gss_verify_mic" (REQUIRED ) ok. GSS-API v2 "gss_wrap" (REQUIRED ) ok. GSS-API v2 "gss_unwrap" (REQUIRED ) ok. INcomplete GSS-API v2 implementation. At least one of the "optional" calls is missing Loading of GSS-API shared library completed. cheers, Christoph ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
