The newly introduced Mit-krb5 does not work with samba v4.7.0 on Centos7.X-x86-64

[Samuel Cabrero]

Hi,

there is an issue on MIT krb5 1.15.1, it is fixed in 1.15.2.

https://github.com/krb5/krb5/commit/b2b06faaf391498da35e014dcfccb0c0792
eb116

On Wed, 2017-09-27 at 14:59 +0800, expert123 via samba-technical wrote:
> Hi,
> 
>   I'm running samba v4.7.0 as AD DC with Mit-krb5, yet krb5kdc exits
> soon 
> after a joined windows7-64bit starts up, with the screen of
> prompting 
> 
>  to press "CTRL+ATL+DELETE" to type user account.
>  
>  The symptom is that krb5 exit with status 6, and coredump happens,
> see 
> below.
>  ------------------------------------------------------
> 
>  [root at pdc samba]# more log.samba
> [2017/09/27 12:54:55.362600,  0] 
> ../lib/util/util_runcmd.c:324(samba_runcmd_io_handler)
>   /usr/sbin/krb5kdc: krb5kdc: do_tgs_req.c:826: process_tgs_req:
> Assertion 
> `status != ((void *)0)' failed.
> [2017/09/27 12:54:55.833120,  0] 
> ../source4/kdc/kdc-service-mit.c:348(mitkdc_server_done)
>   The MIT KDC daemon died with exit status 6
> [2017/09/27 12:54:55.833268,  0] 
> ../source4/smbd/service_task.c:35(task_server_terminate)
>   task_server_terminate: [mitkdc child process exited]
> 
> ================================
> Part of coredump info is:
> 
> ================================
> Wed Sep 27 12:54 1117/87310 "[abrt] krb5-server: krb5kdc killed by 
> SIGABRT"
> 
> cmdline:        /usr/sbin/krb5kdc -n
> executable:     /usr/sbin/krb5kdc
> package:        krb5-server-1.15.1-8.el7
> component:      krb5
> 
> :Sep 27 11:55:56 pdc.ad.pthl.hk samba[14387]:   /usr/sbin/krb5kdc: 
> krb5kdc: do_tgs_req.c:826: process_tgs_req: Assertion `status !=
> ((void 
> *)0)' failed.
> :Sep 27 11:55:56 pdc.ad.pthl.hk abrt-hook-ccpp[14593]: Process 14394 
> (krb5kdc) of user 0 killed by SIGABRT - dumping core
> -------------------------------------------------------------------
> -------------------------------
> 
> I tries on centos7.X-x86-64(X=7.2 and 7.4) for several times, it
> happens 
> every time.
> 
> And kadmin.local command also coredumpped as long as I run
> "listprincs" 
> and "exit"
> 
> 
> While the embedded Hemedal works quite well. 
> 
> So is it a bug?
>