[Date Prev][Date Next] [Chronological] [Thread] [Top]

binding using password from kerberos v



Hello...

I'm having difficulty getting openldap to allow a user to bind by
checking the userPassword against a kerberos V database.  When I
try to bind in this way, I get a core dump. At this point, I just
want to see if there are other people currently using this feature
of openldap, so that I can try to figure out whether it is something
I have misconfigured or some more general problem with the software.
If anyone has run into this and solved the problem, I would be most
grateful for suggestions...

Here are some specifics of my configuration:

openldap 2.0.18
cyrus sasl 1.5.24
openssl 0.9.6
berkeley db 3.2.9
kerberos V 1.2.2b
running on Solaris 8
compiled with Sun cc

configured with the commands:

>CFLAGS="-fast"

>CPPFLAGS="-I/usr/local/include -I/usr/local/ssl/include 
   -I/usr/local/kerberos/include"

>LDFLAGS="-s -L/usr/local/lib -R/usr/local/lib -L/usr/local/ssl/lib
   -R/usr/local/ssl/lib -L/usr/local/kerberos/lib -R/usr/local/kerberos/lib"

>./configure --prefix=/usr/local/ldap --enable-kpasswd --enable-spasswd 
    --enable-wrappers --enable-dynamic --enable-rlookups --enable-cache 
    --with-tls=openssl --with-kerberos=k5 --without-subdir

Contents of the userPassword attribute for the user trying to bind 
is userPassword:
   {KERBEROS}<myUsername>@<myRealm>

Trussing the slapd process, the last things that happen before the 
core dump are:

stat("/etc/krb5.conf", 0xFE981750)              = 0
open("/etc/krb5.conf", O_RDONLY)                = 12
access("/etc/krb5.conf", 2)                     = 0
fstat64(12, 0xFE981588)                         = 0
brk(0x001713C8)                                 = 0
brk(0x001733C8)                                 = 0
ioctl(12, TCGETA, 0xFE981514)                   Err#25 ENOTTY
read(12, " [ l i b d e f a u l t s".., 8192)    = 449
brk(0x001733C8)                                 = 0
brk(0x001753C8)                                 = 0
read(12, 0x00170BCC, 8192)                      = 0
llseek(12, 0, SEEK_CUR)                         = 449
close(12)                                       = 0
stat("/usr/local/kerberos/etc/krb5.conf", 0xFE981750) Err#2 ENOENT
getpid()                                        = 15575 [1]
stat("/etc/krb5.conf", 0xFE9817A0)              = 0
stat("/usr/local/kerberos/etc/krb5.conf", 0xFE9817A0) Err#2 ENOENT
Incurred fault #6, FLTBOUNDS  %pc = 0xFF1610A0
siginfo: SIGSEGV SEGV_MAPERR addr=0x00000014
    Received signal #11, SIGSEGV [caught]
      siginfo: SIGSEGV SEGV_MAPERR addr=0x00000014
sigprocmask(SIG_SETMASK, 0xFEC6F010, 0x00000000) = 0
sigaction(SIGSEGV, 0xFE981338, 0x00000000)      = 0
sigprocmask(SIG_SETMASK, 0xFEC7ADE0, 0x00000000) = 0
setcontext(0xFE9814F0)
Incurred fault #6, FLTBOUNDS  %pc = 0xFF1610A0
siginfo: SIGSEGV SEGV_MAPERR addr=0x00000014
Received signal #11, SIGSEGV [default]
siginfo: SIGSEGV SEGV_MAPERR addr=0x00000014
        *** process killed ***

If I left out relevant info, please ask...

-steve hodges