[PATCH] Fix a couple of memory leaks in winbindd

Qiao Yang geoyang at ironport.com
Fri Sep 5 19:59:12 GMT 2008

>> 2. When connection to DC fails, it fails to destroy kerberos ticket cache in
>> memory.
> I'm not sure about this one. Do we want this? Does this
> really leak in the long run, or is the cache re-used once we
> retry the connection?

We found this leak in the long run when there are some AD server keeps
getting disconnected for various reasons. The problem is with
cli_session_setup_spnego() in libsmb/cliconnect.c. This function calls
kerberos_kinit_password(), which eventually creates a new ccache with
krb5_cc_initialize() each time when it retries the connection. You could add
code the re-use the ccache but currently the code is not there yet.

IronPort, A Cisco Business Unit
950 Elm Ave. 
San Bruno, CA 94066

More information about the samba-technical mailing list