[Samba] Kerberos authentication sigsegvs

[Bård Kalbakk]

* Jeremy Allison (jra at samba.org) wrote:
> On Tue, Nov 30, 2004 at 07:04:06PM +0100, Bård Kalbakk wrote:
> > Hi
> > I'm having major problems setting up Samba 3.0.9 with kerberos
> > authentication. I have also tried with 3.0.8(from Debian SID) with same
> > result.
> > smb.conf[1] has 'security = ads' , and 'use kerberos keytab = yes'.
> > I have set up pam_krb5 and I get TGTs that works with my ssh
> > servers. 
> > But, when I try to authenticate using smbclient -k -L server I
> > get:
> > "session setup failed: Call returned zero bytes (EOF)".
> > 
> > Running smbd -i -d 10 ends up in this backtrace:
> > 
> > GDB is maybee more precise? Here's a backtrace from the coredump, in
> > case you need
> > 
> > #51 0xb7ff5a16 in _dl_map_object_deps () from /lib/ld-linux.so.2
> > #52 0x081d3b3a in smb_panic (why=0x82a173d "internal error") at lib/util.c:1353
> > #53 0x081c12d8 in fault_report (sig=11) at lib/fault.c:41
> > #54 <signal handler called>
> > #55 0x080e3c57 in get_auth_data_from_tkt (auth_data=0xbfffea90, tkt=0x8387ba0) at libsmb/clikrb5.c:188
> 
> Indeed - this is *very* useful ! :-).
> 
> Try this patch please.
> 
> Jeremy.

> Index: libsmb/clikrb5.c
> ===================================================================
> --- libsmb/clikrb5.c	(revision 4019)
> +++ libsmb/clikrb5.c	(working copy)
> @@ -184,7 +184,7 @@
>   void get_auth_data_from_tkt(DATA_BLOB *auth_data, krb5_ticket *tkt)
>  {
>  #if defined(HAVE_KRB5_TKT_ENC_PART2)
> -	if (tkt->enc_part2)
> +	if (tkt->enc_part2 && tkt->enc_part2->authorization_data && tkt->enc_part2->authorization_data[0] && tkt->enc_part2->authorization_data[0]->length)
>  		*auth_data = data_blob(tkt->enc_part2->authorization_data[0]->contents,
>  			tkt->enc_part2->authorization_data[0]->length);
>  #else


Thank you !
Nice to get a working patch so quick :)

Bård