On Fri Jan 04, 2019 at 21:00:01PM -0500, Sam Hartman wrote: > >>>>> "Adrian" == Adrian Bunk <b...@debian.org> writes: > > latest upgrade of libkrb5-3 (1.16.1-1 -> 1.16.2-1) > >> automount starts but dies immediately after accessing a > >> automounter point. > >> > >> Automount is configured to authenticate via GSSAPI using system > >> keytab. After the GSSAPI authentication succeeded, any access to > >> a configure automount entry causes automount to die with an > >> assertion failure (followed by an abort()): > > Adrian> Thanks for your report. > > Adrian> I'm moving this bug report to libkrb5-3 since this is the > Adrian> change that triggered your regression for assessment whether > Adrian> the bug is there. > > Adrian, I'm guessing you're looking at this with your QA hat on? > How well do you understand autofs? Any chance you could help put > together a repo? If you don't know autofs-ldap well, I can learn it > just as well as anyone, but if you do happen to know it well, help would > be appreciated. > In the latest krb5 package, the debian/tests directory contains a > slapd-gssapi test which happens to set up LDAP well enough that you can > SASL authenticate it. > So, my guess is that adapting that test to set up an autofs-ldap that > uses gss auth to ldap probably isn't too incredibly hard. > I don't know autofs at all, and for example I don't know how to set up > the directory to have the right info. > > If you or the submitter can easily help, it would be appreciated. > If not, I'll look into it. > > --Sam > Good morning everyone.
The directory server here is a FreeIPA server on CentOS 7 (without the certificate management). For this I can provide setup instructions from my "scratchpad files". While talking about this, I vaguely remember a similar error with the 389 directory server on RHEL, also with memory ticket cache. [1] which was closed but [2] (on Fedora) was about the same issue [1] https://bugzilla.redhat.com/show_bug.cgi?id=1466441 [2] https://bugzilla.redhat.com/show_bug.cgi?id=1633089 (But beware it may be a red herring!) So long, Andreas. -- "Things that try to look like things often do look more like things than things. Well-known fact." Granny Weatherwax - "Wyrd sisters"
signature.asc
Description: PGP signature
