Re: Slapd SIGSEGV during ldapsearch -Y gssapi (ITS#2101)

[Kurt@OpenLDAP.org]

At 12:25 PM 2002-09-22, miroslav.zubcic@zesoi.fer.hr wrote:
>Hi Kurt!
>
>"Kurt D. Zeilenga" <Kurt@OpenLDAP.org> writes:
>
>> IIRC, MIT Kerberos is not thread-safe.  Cyrus SASL's GSSAPI
>> implementation requires a thread-safe Kerberos V libraries
>> (such as those provided in Heimdal Kerberos).
>>
>> This is not viewed as an OpenLDAP Software problem.  This
>> issue will be closed.
>
>slapd(8) has died because sasl2 used his plugin libgssapiv2.so which
>has (obviously) bad interaction with MIT kerberos API, and ordinary
>user was using ldapsearch(1) to nuke slapd(8) that way.
>
>Can slapd avoid/workaround this bug?

compile OpenLDAP --without-threads or don't use MIT Kerberos libraries.

>If not, where should I send this bug report and trace?
>To MIT people or cyrus-sasl mailing list?

Likely the MIT folks will say "MIT Kerberos libraries are
not thread safe" and Cyrus folks will say "Use thread
safe Kerberos libraries"...

Kurt