Try This.
--- smbk5pwd.c 2008-10-22 23:42:13.000000000 +0100
+++ smbk5pwd.c.orig 2008-10-06 02:00:56.000000000 +0100
@@ -372,8 +372,6 @@
struct berval *keys;
int kvno, i;
Attribute *a;
- Key *local_keys;
- size_t local_num_keys;
if ( !SMBK5PWD_DO_KRB5( pi ) ) break;
@@ -402,17 +400,7 @@
op->o_log_prefix, e->e_name.bv_val, 0 );
}
- /* _kadm5_set_keys is a private function, inline its
code here */
- ret = hdb_generate_key_set_password(context, ent.principal,
- qpw->rs_new.bv_val, &local_keys, &local_num_keys);
- if (ret != 0)
- break;
-
- hdb_free_keys(context, ent.keys.len, ent.keys.val);
- ent.keys.val = local_keys;
- ent.keys.len = local_num_keys;
-
-
+ ret = _kadm5_set_keys(kadm_context, &ent,
qpw->rs_new.bv_val);
hdb_seal_keys(context, db, &ent);
krb5_free_principal( context, ent.principal );
@@ -431,7 +419,7 @@
}
BER_BVZERO( &keys[i] );
- hdb_free_keys(context, ent.keys.len, ent.keys.val);
+ _kadm5_free_keys(kadm_context, ent.keys.len, ent.keys.val);
if ( i != ent.keys.len ) {
ber_bvarray_free( keys );
On Mon, Jan 12, 2009 at 12:43 AM, Scott Grizzard <[email protected]>wrote:
> If you have a patch, that would be great. I just started to dig into it,
> and I haven't looked at Heimdal's libraries until now.
> - Scott
>
> On Jan 11, 2009, at 2:51 PM, David Markey wrote:
>
> i submitted that bug, do we need a patch or do you want to take over scott?
>
> On Sat, Jan 10, 2009 at 11:10 PM, Scott Grizzard <[email protected]>
> wrote:
> > Never mind. I found the issue on the mailing lists, now that I know
> exactly
> > what is causing the problem.
> >
> > I'll take a crack at it next weekend - no promises though.
> >
> > - Scott Grizzard
> >
> > On Jan 10, 2009, at 5:23 PM, Scott Grizzard wrote:
> >
> >> That is for Heimdal 1.2. I am using 1.1. Since I have seen it work for
> >> heimdal 1.0.1, is it correct to assume that the module was written for
> 1.0,
> >> and that significant changes happened to the API between 1.0 and 1.1?
> >>
> >> Would a patch for 1.2 fix the issue for Heimdal 1.1? (or... if I was to
> >> take the time to patch it for 1.1, would that patch work for 1.2?) I am
> not
> >> familiar enough with Heimdal to know.
> >>
> >> - Scott Grizzard
> >>
> >> On Jan 10, 2009, at 5:01 PM, Howard Chu wrote:
> >>
> >>> Scott Grizzard wrote:
> >>>>
> >>>> I am trying to make the smbk5pwd module manage password syncing with
> >>>> Samba and Kerberos. I am running on Ubuntu Server 8.10 with
> >>>> openldap-2.4.11 and heimdal 1.1.
> >>>>
> >>>> I can "make" the smbk5pwd module, but when I run a password change
> using
> >>>> it, I recieve the following error:
> >>>
> >>>> I've messed with this thing for quite a while now, but nothing seems
> to
> >>>> be working. Any ideas?
> >>>
> >>> This is ITS#5799. A patch was supposedly available, but the person who
> >>> submitted the bug report never attached the patch to the report. Feel
> free
> >>> to nudge the submitter, we already have...
> >>>
> >>> --
> >>> -- Howard Chu
> >>> CTO, Symas Corp. http://www.symas.com
> >>> Director, Highland Sun http://highlandsun.com/hyc/
> >>> Chief Architect, OpenLDAP http://www.openldap.org/project/
> >>
> >
> >
>
>
>