[Samba] Kerberos authentication sigsegvs

Jeremy Allison jra at samba.org
Tue Nov 30 18:59:45 GMT 2004


On Tue, Nov 30, 2004 at 07:04:06PM +0100, Bård Kalbakk wrote:
> Hi
> I'm having major problems setting up Samba 3.0.9 with kerberos
> authentication. I have also tried with 3.0.8(from Debian SID) with same
> result.
> smb.conf[1] has 'security = ads' , and 'use kerberos keytab = yes'.
> I have set up pam_krb5 and I get TGTs that works with my ssh
> servers. 
> But, when I try to authenticate using smbclient -k -L server I
> get:
> "session setup failed: Call returned zero bytes (EOF)".
> 
> Running smbd -i -d 10 ends up in this backtrace:
> 
> GDB is maybee more precise? Here's a backtrace from the coredump, in
> case you need
> 
> #51 0xb7ff5a16 in _dl_map_object_deps () from /lib/ld-linux.so.2
> #52 0x081d3b3a in smb_panic (why=0x82a173d "internal error") at lib/util.c:1353
> #53 0x081c12d8 in fault_report (sig=11) at lib/fault.c:41
> #54 <signal handler called>
> #55 0x080e3c57 in get_auth_data_from_tkt (auth_data=0xbfffea90, tkt=0x8387ba0) at libsmb/clikrb5.c:188

Indeed - this is *very* useful ! :-).

Try this patch please.

Jeremy.
-------------- next part --------------
Index: libsmb/clikrb5.c
===================================================================
--- libsmb/clikrb5.c	(revision 4019)
+++ libsmb/clikrb5.c	(working copy)
@@ -184,7 +184,7 @@
  void get_auth_data_from_tkt(DATA_BLOB *auth_data, krb5_ticket *tkt)
 {
 #if defined(HAVE_KRB5_TKT_ENC_PART2)
-	if (tkt->enc_part2)
+	if (tkt->enc_part2 && tkt->enc_part2->authorization_data && tkt->enc_part2->authorization_data[0] && tkt->enc_part2->authorization_data[0]->length)
 		*auth_data = data_blob(tkt->enc_part2->authorization_data[0]->contents,
 			tkt->enc_part2->authorization_data[0]->length);
 #else


More information about the samba mailing list