On Wed, 2009-03-04 at 12:11 -0600, John Hascall wrote:
>
> > > Mar 04 07:04:13 server krb5kdc[18148](info): AS_REQ (7 etypes {18 17 16
> > > 23 1 3 2}) 192.168.1.237: KDC_RETURN_PADATA: [email protected] for
> > > krbtgt/[email protected], Cannot allocate memory
>
> > > There is no memory crunch on the server.
>
> > After a quick glance at the code, I don't see where ENOMEM is returned
> > in cases where it wasn't an allocation error. If you have output from
> > -DDEBUG, that might give us a clue of the problem.
>
> Typically I find this happens where something has previously gone
> amiss and "malloc" gets passed some absurd number.The server and client are two different machines. I only modified the client machine's pkinit.so and, yes, I did rename the old pkinit.so to pkinit2.so in the same directory. Moving the original pkinit.so completely out of lib as Douglas suggested did not fix it. I ran strace -okdc.trace krb5kdc -n on the server. Looking through the trace logs from the accept() of the preauth connection to write() I see nothing suspicious and no ENOMEM errors. I see a bunch of read()s of my AS-REQ, various access to principal* and a read() from /dev/urandom. Nothing between accept() and the write() of the error message even returns a negative number. > > John > ________________________________________________ > Kerberos mailing list [email protected] > https://mailman.mit.edu/mailman/listinfo/kerberos > -- Loren M. Lang [email protected] http://www.alzatex.com/ Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc Fingerprint: 10A0 7AE2 DAF5 4780 888A 3FA4 DCEE BB39 7654 DE5B
smime.p7s
Description: S/MIME cryptographic signature
________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
