I found Rhys's Ubuntu segfault.
Coming soon to Fedora and RHEL!
MIT changed the gss-api library in version 1.12 and introduced a
significant problem. There is a endless call cycle that segfaults
overflowing the stack if a mechanism such as moonshot recursively calls
into the gssapi library and does not define the functions that the
gssapi library expects.
The correct behavior is not to call recursively into the mechglue.
This will probably be a problem on RHEL 7 and Fedora.
I've filed an MIt bug and will look into the issue tomorrow. It should
be easy to work with Redhat's Kerberos developers and get a fix into
Fedora/RHEL; Ubuntu may be a bit more tricky but I think I can handle
that too.
--Sam
|