To: rt@krbdev.mit.edu
Subject: Re: [krbdev.mit.edu #2914] size change in cache breaks alpha-dux40 for krb5-1.3, krb5-1.4
In-Reply-To: <rt-2914-13465.1.83058769036485@krbdev.mit.edu> (Quanah Gibson-Mount via's message of "Thu, 3 Feb 2005 22:17:00 -0500 (EST)")
References: <rt-2914-13465.1.83058769036485@krbdev.mit.edu>
From: Russ Allbery <rra@stanford.edu>
Organization: The Eyrie
Date: Thu, 03 Feb 2005 19:37:33 -0800
Message-Id: <87d5vh2dxe.fsf@windlord.stanford.edu>
User-Agent: Gnus/5.1007 (Gnus v5.10.7) XEmacs/21.4 (Corporate Culture, linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
RT-Send-Cc: 
Content-Length: 1323

Quanah Gibson-Mount via RT <rt-comment@krbdev.mit.edu> writes:

> There was a size change in some variable between krb5-1.2.8 and krb5-1.3
> which broke our ability to generate an AFS token from the kerberos
> ticket cache.

> Using the krb5-1.2.8 kinit:

> K4 cache:
> tru64-build:~> ls -l /tmp/tkt54046
> -rw-------    1 quanah   root          236 Feb  3 18:20 /tmp/tkt54046

> Using the krb5-1.3.6 kinit:

> K4 cache:
> ls -l /tmp/tkt54046
> -rw-------    1 quanah   root          147 Feb  3 18:21 /tmp/tkt54046

The first one above is with an AFS service ticket while the second one
does not have an AFS service ticket.  The possibly more useful difference
without that change is:

-rw-------    1 rra      root          132 Feb  3 19:35 /tmp/tkt11857
-rw-------    1 rra      root          136 Feb  3 19:36 /tmp/tkt11857

suspiciously four bytes too long.  Quanah, you may want to make sure that
in the process of fixing the uint64_t thing you didn't use a long long
somewhere that you didn't want to, or a long somewhere that an int should
be, but it might be another issue.

> The worthless error from aklog is:
> aklog: Failed getting tokens for cell (local cell) in realm (local realm).

And by aklog, we mean the KTH afslog program.

-- 
Russ Allbery (rra@stanford.edu)             <http://www.eyrie.org/~eagle/>