openldap client GSSAPI authentication segfaults in fbsd8stablei386

[Jeremy Chadwick]

On Sat, Jul 17, 2010 at 11:15:42AM -0700, Benjamin Lee wrote:
> On 07/17/2010 07:41 AM, Jeremy Chadwick wrote:
> > The problem really looks to be with GSSAPI, which is part of the base
> > system (src/lib/libgssapi).
> > 
> > If I can reproduce the problem on the test i386 system I'm building,
> > which will have the same port + configuration as the test amd64 system,
> > then I would say it's purely a GSSAPI thing regardless if you're using
> > GSSAPI w/ SASL or GSSAPI w/ Kerberos.
> 
> Can you try reproducing the issue on 8-STABLE?

As the thread has stated, I can't reproduce the problem on RELENG_8
amd64, but I'm still working on building the test i386 box to see if I
can reproduce the issue.

Please be aware the issue supposedly can be reproduced *without* use of
Kerberos/Heimdal.

> I recently submitted a Heimdal patch against 8.1-STABLE and 9.0-CURRENT
> that resolves some libgssapi-related issues:
> 
> http://www.freebsd.org/cgi/query-pr.cgi?pr=kern/147454
> 
> The patch breaks ABI, so you'll have to rebuild libgssapi-dependent
> applications.

-- 
| Jeremy Chadwick                                   jdc at parodius.com |
| Parodius Networking                       http://www.parodius.com/ |
| UNIX Systems Administrator                  Mountain View, CA, USA |
| Making life hard for others since 1977.              PGP: 4BD6C0CB |