Re: kpasswdd dumps on OpenBSD6.3

ASV <[email protected]> Sat, 04 Aug 2018 19:43:54 +0200
Newsgroups gmane.comp.encryption.kerberos.heimdal.general
Message-ID <[email protected]>
On Fri, 2018-08-03 at 14:05 -0400, Viktor Dukhovni wrote:
> > On Aug 3, 2018, at 1:43 PM, ASV <[email protected]> wrote:
> > 
> > No, no crashes using "kadmin -l".
> 
> This shows that "kadmin" and the libkadm5srv.so library work fine.
> 
> Which libraries is "kadmin" linked with (post ldd output)?
# ldd /usr/local/heimdal/bin/kadmin
/usr/local/heimdal/bin/kadmin:
        Start            End              Type  Open Ref GrpRef Name
        00000686bb600000 00000686bb81c000 exe   2    0   0      /usr/local/heimdal/bin/kadmin
        0000068994916000 0000068994b23000 rlib  0    1   0      /usr/local/heimdal/lib/libkadm5clnt.so.3.0
        0000068915230000 0000068915434000 rlib  0    9   0      /usr/local/lib/libcom_err.so.21.0
        00000688da241000 00000688da4d7000 rlib  0    4   0      /usr/local/heimdal/lib/libkrb5.so.22.0
        0000068944098000 0000068944342000 rlib  0    7   0      /usr/local/heimdal/lib/libasn1.so.22.0
        00000688fd6d7000 00000688fd8ec000 rlib  0    9   0      /usr/local/heimdal/lib/libroken.so.3.0
        00000689b9623000 00000689b9830000 rlib  0    10   0      /usr/lib/libutil.so.13.0
        00000688fe849000 00000688fea73000 rlib  0    6   0      /usr/local/heimdal/lib/libwind.so.3.0
        00000689b15ca000 00000689b17da000 rlib  0    7   0      /usr/local/heimdal/lib/libheimbase.so.2.0
        000006896c15e000 000006896c3b2000 rlib  0    5   0      /usr/local/heimdal/lib/libhx509.so.1.0
        00000688f28ff000 00000688f2b41000 rlib  0    6   0      /usr/local/heimdal/lib/libhcrypto.so.0.0
        0000068975d14000 00000689760f0000 rlib  0    7   0      /usr/lib/libcrypto.so.43.1
        000006892568c000 000006892598a000 rlib  0    5   0      /usr/local/heimdal/lib/libheimsqlite.so.1.0
        00000689af3af000 00000689af5c5000 rlib  0    1   0      /usr/local/heimdal/lib/libkadm5srv.so.3.0
        000006899ac6a000 000006899ae91000 rlib  0    2   0      /usr/local/heimdal/lib/libhdb.so.3.0
        00000689b368f000 00000689b3895000 rlib  0    1   0      /usr/local/heimdal/lib/libsl.so.1.0
        00000688ca70a000 00000688ca941000 rlib  0    2   0      /usr/local/heimdal/lib/libheimedit.so.1.0
        000006890dd52000 000006890dfa8000 rlib  0    3   0      /usr/lib/libcurses.so.14.0
        0000068923cc5000 0000068923ece000 rlib  0    13   0      /usr/lib/libpthread.so.25.1
        00000688eb50d000 00000688eb7ed000 rlib  0    1   0      /usr/lib/libc.so.92.3
        0000068924a00000 0000068924a00000 ld.so 0    1   0      /usr/libexec/ld.so
> Which libraries is "kpasswdd" linked with (post ldd output) and make
> sure you're reporting the results for the right executable.
# ldd /usr/local/heimdal/bin/kpasswd
/usr/local/heimdal/bin/kpasswd:
        Start            End              Type  Open Ref GrpRef Name
        000019fca7d00000 000019fca7f04000 exe   2    0   0      /usr/local/heimdal/bin/kpasswd
        000019ff4295c000 000019ff42bf2000 rlib  0    1   0      /usr/local/heimdal/lib/libkrb5.so.22.0
        000019ff9d5f6000 000019ff9d8a0000 rlib  0    4   0      /usr/local/heimdal/lib/libasn1.so.22.0
        000019ff68568000 000019ff6876c000 rlib  0    6   0      /usr/local/lib/libcom_err.so.21.0
        000019fed6dab000 000019fed6fc0000 rlib  0    6   0      /usr/local/heimdal/lib/libroken.so.3.0
        000019fec573d000 000019fec594a000 rlib  0    7   0      /usr/lib/libutil.so.13.0
        000019ff28c6a000 000019ff28e94000 rlib  0    3   0      /usr/local/heimdal/lib/libwind.so.3.0
        000019ff6bed7000 000019ff6c0e7000 rlib  0    4   0      /usr/local/heimdal/lib/libheimbase.so.2.0
        000019fef522c000 000019fef5480000 rlib  0    2   0      /usr/local/heimdal/lib/libhx509.so.1.0
        000019ffa531e000 000019ffa5560000 rlib  0    3   0      /usr/local/heimdal/lib/libhcrypto.so.0.0
        000019ff51dc7000 000019ff521a3000 rlib  0    4   0      /usr/lib/libcrypto.so.43.1
        000019fef6cf8000 000019fef6ff6000 rlib  0    2   0      /usr/local/heimdal/lib/libheimsqlite.so.1.0
        000019ff49167000 000019ff49370000 rlib  0    9   0      /usr/lib/libpthread.so.25.1
        000019ff38f04000 000019ff391e4000 rlib  0    1   0      /usr/lib/libc.so.92.3
        000019ff0f000000 000019ff0f000000 ld.so 0    1   0      /usr/libexec/ld.so

And yes, these are the right executable called by the rc scripts.

> > With "it worked well" I was just referring to the fact that "kadmin
> > -l cpw ..." doesn't work when kpasswdd is down
> 
> That's not possible.  The "kadmin -l cpw" command makes local changes
> directly in the HDB and does not use "kpasswdd".  Its behaviour
> cannot
> depend on whether kpasswdd is running or not.  It is operates
> silently.
Sorry that was my bad. I've verified it and the only circumstance this
could possibly happen is when the two passwords do not match. So they
did not match and it failed, silently, and it tricked me.

> > Unfortunately I don't know why you do not get enough debug.
> 
> Presumably you did not install an executable with the debug symbols.
About this I do not know what to say, I've seen the CFLAGS in the
compiling output lines and I even posted in the email.
I will try again as soon as I can. 

Thank you.