Memory leak with Squid negotiate_kerberos_auth helper under OpenBSD 6.3

Silamael <[email protected]> Mon, 3 Sep 2018 13:16:11 +0200
Newsgroups gmane.comp.encryption.kerberos.heimdal.general
Message-ID <[email protected]>
Hi,


I'm currently investigating a problem with Squids Kerberos 
authentication helper using Heimdal 7.5.0 under OpenBSD 6.3.

Squid version is 3.2.27 and it's not the official OpenBSD port since it 
lacks support for Kerberos at all.

I see a rapidly increasing memory consumption of the 
negotiate_kerberos_auth process when processing authentication requests.

The helper is talking to a Windows 2016 AD server.

Are there any known problems with Heimdal under OpenBSD 6.3?

Can you perhaps give me some hints how to debug the problem?

The massive leak happened after Heimdal has been updated from version 
1.5.3 to 7.4.0 in prior versions of OpenBSD.

After updating to OpenBSD 6.3 and Heimdal 7.5.0, the memory leak still 
exists.


Thanks in advance!


-- Matthias