[Bug 276257] security/heimdal kadmin -l init segfaults on FreeBSD 14.0-RELEASE

From: <bugzilla-noreply_at_freebsd.org>
Date: Thu, 11 Jan 2024 12:03:15 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=276257

            Bug ID: 276257
           Summary: security/heimdal kadmin -l init segfaults on FreeBSD
                    14.0-RELEASE
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: hrs@FreeBSD.org
          Reporter: bsd@abinet.ru
             Flags: maintainer-feedback?(hrs@FreeBSD.org)
          Assignee: hrs@FreeBSD.org

I try to setup heimdal according handbook guide, however kadmin -l is unable to
init new realm, init command segfaults.

I've tried heimdal and heimdal-devel compiled and installed from packages, both
on 14.0 without any luck. 

On 13 branch it works.

I've found a really old PR here with the same symptoms and it could be
workarounded with custom cyphers after openssl banned rc4. However, I found no
suitable settings in my case yet.

To reproduce the issue:

1. Clean /var/heimdal, do not start daemons.
2. Do not bother with master key or krb5.conf, just proceed with kadmin -l and
issue init DOMAIN.NAME. It asks a question about ticket lifetime and crashes
after that, leaving database empty.

-- 
You are receiving this mail because:
You are the assignee for the bug.