Stack trace dor gssapi-with-mic

Sergio Gelato Sergio.Gelato at astro.su.se
Mon Apr 20 06:10:17 EST 2009


* Ted Creedon [2009-04-19 11:05:22 -0700]:
> I think I had better update akk the kerberos and gssapi to the latest?
> 
> Please advise.
> 
> Thanks
> 
> Tedc
> ssh -vvv admin at geronimo.creedon.biz
> <<<<<<<<snip>>>>>>>>>
> debug2: service_accept: ssh-userauth
> debug1: SSH2_MSG_SERVICE_ACCEPT received
> debug2: key: /root/.ssh/identity ((nil))
> debug2: key: /root/.ssh/id_rsa (0x568da0)
> debug2: key: /root/.ssh/id_dsa (0x568dc0)
> debug1: Authentications that can continue: gssapi-with-mic
> debug3: start over, passed a different list gssapi-with-mic
> debug3: preferred gssapi-with-mic
> debug3: authmethod_lookup gssapi-with-mic
> debug3: remaining preferred:
> debug3: authmethod_is_enabled gssapi-with-mic
> debug1: Next authentication method: gssapi-with-mic
> *** glibc detected *** ssh: double free or corruption (!prev):
> 0x0000000000574a20 ***
> ======= Backtrace: =========
> /lib64/libc.so.6[0x2b044f62537e]
> /lib64/libc.so.6(__libc_free+0x6c)[0x2b044f62699c]
> /usr/lib64/libkrb5.so.3(krb5_free_cred_contents+0x6d)[0x2b044f1620cd]
> /usr/lib64/libkrb5.so.3(krb5_free_creds+0x9)[0x2b044f162139]
> /usr/lib64/libkrb5.so.3(krb5_free_tgt_creds+0x1d)[0x2b044f16216d]
> /usr/lib64/libkrb5.so.3(krb5_get_credentials+0x209)[0x2b044f15d299]
> /usr/lib64/libgssapi_krb5.so.2(krb5_gss_init_sec_context+0x998)[0x2b044f00ed68]

This looks like a client-side problem. Is the client also running some version
of SuSE? At this point I would look at the source code for the MIT Kerberos
package (the exact version installed on your client) and work out what must
have been happening. Running the ssh client under valgrind may also prove
instructive. Does your ccache contain a ticket for host/geronimo.creedon.biz
after the error?


More information about the openssh-unix-dev mailing list