[PATCH] Fix a couple of memory leaks in winbindd
Qiao Yang
geoyang at ironport.com
Fri Sep 5 19:59:12 GMT 2008
>> 2. When connection to DC fails, it fails to destroy kerberos ticket cache in
>> memory.
>
> I'm not sure about this one. Do we want this? Does this
> really leak in the long run, or is the cache re-used once we
> retry the connection?
We found this leak in the long run when there are some AD server keeps
getting disconnected for various reasons. The problem is with
cli_session_setup_spnego() in libsmb/cliconnect.c. This function calls
kerberos_kinit_password(), which eventually creates a new ccache with
krb5_cc_initialize() each time when it retries the connection. You could add
code the re-use the ccache but currently the code is not there yet.
--Qiao
IronPort, A Cisco Business Unit
950 Elm Ave.
San Bruno, CA 94066
More information about the samba-technical
mailing list