Ticket History #6488: NFS fails to work with KRB5 1.7

# Wed May 13 17:32:22 2009 hartmans (Sam Hartman) - Ticket created

To:	krb5-bugs@MIT.EDU
Subject:	NFS fails to work with KRB5 1.7
From:	Sam Hartman <hartmans@MIT.EDU>
Date:	Wed, 13 May 2009 17:32:10 -0400

Download (untitled) / with headers
text/plain 277B

I didn't make much progress on this today and may not have additional
time to work on it, so I wanted to at least open the bug.

See http://bugs.debian.org/528514

Apparently, gss_export_lucid_sec_context creates a returned context
that segfaults when accessed by rpc.gssd.

# Thu May 14 12:50:52 2009 ghudson@mit.edu (Greg Hudson) - Given to ghudson@mit.edu (Greg Hudson)

# Thu May 14 12:50:53 2009 ghudson@mit.edu (Greg Hudson) - Target_Version 1.7 added

# Thu May 14 12:50:53 2009 ghudson@mit.edu (Greg Hudson) - Status changed from 'new' to 'open'

# Thu May 14 12:50:53 2009 ghudson@mit.edu (Greg Hudson) - Tags pullup added

# Thu May 14 12:50:53 2009 ghudson@mit.edu (Greg Hudson) - Correspondence added

From:	ghudson@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 337B

gss_krb5int_export_lucid_sec_context was erroneously copying the first
sizeof(void *) bytes of the context into data_set, instead of the
pointer to the context.

https://github.com/krb5/krb5/commit/97ab8ebd3d26e279ffc92a58b59a3ff6c85c67db
Commit By: ghudson
Revision: 22351
Changed Files:
U trunk/src/lib/gssapi/krb5/lucid_context.c

# Thu May 14 12:52:09 2009 ghudson@mit.edu (Greg Hudson) - Comments added

Download (untitled) / with headers
text/plain 115B

I'm leaving this issue open until we hear back from the reporter of the
Debian bug, since I haven't tested the fix.

# Fri May 15 15:57:27 2009 tlyu (Taylor Yu) - Comments added

To:	rt-comment@krbdev.MIT.EDU
Subject:	Re: [krbdev.mit.edu #6488] NFS fails to work with KRB5 1.7
From:	Tom Yu <tlyu@MIT.EDU>
Date:	Fri, 15 May 2009 15:57:24 -0400
RT-Send-Cc:

Download (untitled) / with headers
text/plain 328B

Also, that there is an additional issue reported in that Debian bug
having to do with "unsupported algorithm 1". This looks like it is
due to the kernel supporting only des-cbc-raw. It could be that the
subkey setup that occurs in the context no longer smashes the enctype
of the keyblock, but we need to investigate further.

# Mon May 18 11:56:10 2009 tlyu (Taylor Yu) - Version_reported 1.7 added

# Mon May 18 15:08:49 2009 hartmans (Sam Hartman) - Status changed from 'open' to 'review'

# Mon May 18 15:08:49 2009 hartmans (Sam Hartman) - Correspondence added

From:	hartmans@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 322B

Copy the sequence key rather than the subkey for lucid contexts in RFC
1964 mode, so that we map to raw des enctypes rather than say
des-cbc-crc.

https://github.com/krb5/krb5/commit/cbb34c759c2d4c189fd4e825dd2cadfe38f4ad2d
Commit By: hartmans
Revision: 22354
Changed Files:
U trunk/src/lib/gssapi/krb5/lucid_context.c

# Sun May 24 18:50:45 2009 tlyu (Taylor Yu) - Version_Fixed 1.7 added

# Sun May 24 18:50:45 2009 tlyu (Taylor Yu) - Correspondence added

From:	tlyu@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 930B

pull up r22351, r22354 from trunk

------------------------------------------------------------------------
r22354 | hartmans | 2009-05-18 21:08:48 +0200 (Mon, 18 May 2009) | 8 lines

ticket: 6488
target_version: 1.7
tags: pullup

Copy the sequence key rather than the subkey for lucid contexts in RFC
1964 mode, so that we map to raw des enctypes rather than say
des-cbc-crc.
------------------------------------------------------------------------
r22351 | ghudson | 2009-05-14 18:50:52 +0200 (Thu, 14 May 2009) | 9 lines

ticket: 6488
status: open
tags: pullup
target_version: 1.7

gss_krb5int_export_lucid_sec_context was erroneously copying the first
sizeof(void *) bytes of the context into data_set, instead of the
pointer to the context.

https://github.com/krb5/krb5/commit/fb5ee2d640a0861bb5ea52bd68111ad6d5fc692c
Commit By: tlyu
Revision: 22373
Changed Files:
U branches/krb5-1-7/src/lib/gssapi/krb5/lucid_context.c

# Wed Dec 16 18:02:54 2015 tlyu (Taylor Yu) - CustomField pullup deleted

# Sun Sep 24 20:39:54 2017 ghudson@mit.edu (Greg Hudson) - Status changed from 'review' to 'resolved'