Memory leaks in version 1.6.dfsg.3~beta1-2ubuntu1.1

Thanks I was wondering how I can reproduce this?

Regards
chuck

>>>>> "Chuck" == Chuck Short <email address hidden> writes:

    Chuck> Thanks I was wondering how I can reproduce this? Regards
    Chuck> chuck

Set up openssh-krb5 on a server with a keytab
set GssapiKeyExchange to yes in sshd_config
set gssapiKeyExchange to yes in a client config.

Set the replay cache type to none; I'm not sure what the config
variable is for that but the libapache2-mod-auth-kerb docs should tell
you.
run sshd under valgrind and confirm the leak.

I recommend sshd rather than apache2 because getting negotiate auth
with apache2 running is tricky.

Why is this seen as "low" priotiry, it's causing no end of problems for some of our servers running out of memory, I have to restart the effected daemons twice a day, which is a pretty ugly, I have confirmed the patch I submitted from the <email address hidden> mailing list does work. All you have to do is apply this patch:

--- ./src/lib/krb5/rcache/rc_none.c 2004-08-04 07:58:17.000000000 +0100
+++ ./src/lib/krb5/rcache/rc_none.c 2009-11-09 09:14:43.000000000 +0000
@@ -43,11 +43,17 @@
    return 0;
}
#define krb5_rc_none_recover krb5_rc_none_noargs
-#define krb5_rc_none_destroy krb5_rc_none_noargs
-#define krb5_rc_none_close krb5_rc_none_noargs
#define krb5_rc_none_expunge krb5_rc_none_noargs

static krb5_error_code KRB5_CALLCONV
+krb5_rc_none_close(krb5_context ctx, krb5_rcache rc)
+{
+ free (rc);
+ return 0;
+}
+#define krb5_rc_none_destroy krb5_rc_none_close
+
+static krb5_error_code KRB5_CALLCONV
krb5_rc_none_store(krb5_context ctx, krb5_rcache rc, krb5_donot_replay *r)
{
    return 0;

I tried to make a new libkrb53 package myself, but there are lots of interdependencies which mean I would have to remake lots of other packages. Please apply this patch and update the official Hardy repository ASAP.

I've found and attempted a fix for more memory leaks in libkrb53, here's a patch (attached) that fixes them for me when patched against the krb5-1.6.4-beta1 relase available from MIT.

I urge you to test this patch (it may have undesirable side effects I'm unaware of) and if it's good then merge it into the Ubuntu release of MIT kerberos.

Reards, Dan...

Still low priproty? I'm having to use custom build libs which override the libkrb53 package, which is not optimal. Any idea when these bug fixes will be merged?

Erm nobody doing anything to get these fixes merged into the upstream? Anything? Anybody? :-/

Is this still an issue? krb5 version 1.7dfsg~beta3-1ubuntu0.4 uploaded on 07 Jan 2010 seems to have a fix from debian titled "none replay cache memory leak". This should have fixed the problem in karmic and above. Can someone please confirm?

[Expired for krb5 (Ubuntu) because there has been no activity for 60 days.]