saslauthd+kerberos infinite loop inside sendto_kdc.c at function service_fds

Dan White dwhite at olp.net
Wed Sep 18 16:05:43 EDT 2013


On 09/18/13 19:33 +0100, Rodrigo Nuno Bragança da Cunha wrote:
>On 18/09/13 18:49, Dan White wrote:
>> As a work around, you could try using saslauthd's pam backend with a krb5
>> pam module.
>>
>
>I'm using saslauthd as an authentication method for slapd, so that's not
>really an option...

I do not believe slapd should care, with regards to pass-through
authentication.

>I could patch kerberos code so that if the cycle goes on for X times
>without returning the process dies, or something like that... or I could
>simply kill and relaunch saslauthd automatically if it goes weird...
>
>Could this be a saslauthd bug? Is it a problem with kerberos library?

I am not sure. Could you compile saslauthd against heimdal to see if the
same issue exists?

-- 
Dan White


More information about the Cyrus-sasl mailing list