Re: GSSAPIDelegateCredentials fails with a segfault

On 30 Apr 2007, at 17:23, Johan Andersson wrote:


>
> First off: Have anyone seen this before?

No, this is the first report I've seen of this problem. Have you made
sure that all of your library dependencies are correct? That is, that
you're building, and running, against the same version of libgssapi.
Unfortunately, some vendors have taken to shipping a libgssapi which
doesn't conform to the GSSAPI API - this often causes segfaults at
unexpected moments.

> Second: Even though I have set the core limit to 100M in
> limits.conf and
> verified that it gets set using strace -f /usr/sbin/sshd, I don't get
> any coredump. Is there any good way of debugging these kind of
> problems?

Privsep makes it pretty tricky to follow through all of the processes
with a debugger. Often the easiest thing to do is to instrument the
code. If it is dying where you think it is, then adding additional
debug statements to ssh_gssapi_krb5_storecreds is the best place to
start. In particular, it's worth seeing if the call to
gss_krb5_copy_ccache is succeeding.

Simon.


_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@mindrot.org
http://lists.mindrot.org/mailman/lis...enssh-unix-dev