Thanks for the pointer Brian, see SRU format below:

[Impact]

* Effects of the bug on users
The kdc process leaks memory which means the users will need to restart the 
service when enough time has passed.

* Justification for backporting the fix to the stable release
The kdc is a long lived process, which means this leak will eventually be hit 
by anyone. I would not regard the current package as "stable".

* Explanation of how the upload fixes this bug
https://github.com/heimdal/heimdal/issues/93

[Test Case]

* Install heimdal-kdc package

* Modify /etc/krb5.conf so you use the same machine for AS-REQ:
---
[realms]
        YOUR.REALM = {
                kdc = your-local-machine.tld
        }
---

* Add "test" user with password "test"
kadmin -l --use-defaults test
test@YOUR.REALM's Password: 
Verify password - test@YOUR.REALM's Password:

* Note how much RAM is currently being used by the kdc process:
---
# ps auxww | grep kdc | grep -v grep
root       832  0.0  0.1  79948  2768 ?        S    09:22   0:00 
/usr/lib/heimdal-servers/kdc --config-file=/etc/heimdal-kdc/kdc.conf
---

* Perform a bunch of requests against it:
---
# for request in {1..20000}; do echo test | kinit --password-file=STDIN 
test@YOUR.REALM; done
---

* Note how much RAM is used after the test has been completed:
# ps auxww | grep kdc | grep -v grep
root       832  2.1  0.4  85660  9104 ?        S    09:22   0:27 
/usr/lib/heimdal-servers/kdc --config-file=/etc/heimdal-kdc/kdc.conf
---

* Install the new packages

* Reboot the machine

* Get a fresh RAM measurement:
---
# ps auxww | grep kdc | grep -v grep
root       864  0.0  0.1  79948  2764 ?        S    11:01   0:00 
/usr/lib/heimdal-servers/kdc --config-file=/etc/heimdal-kdc/kdc.conf
---

* Run test again
---
# for request in {1..20000}; do echo test | kinit --password-file=STDIN 
test@YOUR.REALM; done
---

* Note that much less memory is used now:
---
# ps auxww | grep kdc | grep -v grep
root       864  1.8  0.1  79948  3468 ?        S    11:01   0:27 
/usr/lib/heimdal-servers/kdc --config-file=/etc/heimdal-kdc/kdc.conf
---

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to heimdal in Ubuntu.
https://bugs.launchpad.net/bugs/1422359

Title:
  heimdal-kdc: kdc process leaks memory

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/heimdal/+bug/1422359/+subscriptions

-- 
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs

Reply via email to