Installed package does not work

Bug #1648898 reported by dwmw2
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
gss-ntlmssp (Ubuntu)
Expired
Undecided
Unassigned

Bug Description

The gss-ntlmssp package installs a file in /etc/gss/mech.d which is supposed to make it get loaded.

It doesn't work for two reason. Firstly, it gets completely ignored because its filename doesn't end in ".conf".

Secondly, it contains an incorrect entry for the shared library path. So we end up doing this:
 stat("/usr/lib/x86_64-linux-gnu/gss/${prefix}/lib/x86_64-linux-gnu/gssntlmssp/gssntlmssp.so", 0x7ffca5870a90) = -1 ENOENT (No such file or directory)

Revision history for this message
dwmw2 (dwmw2) wrote :

Even when I fix that so the module gets loaded, it still doesn't seem to work.

$ KRB5CCNAME=/dev/null curl -v --negotiate -u : $SERVER
...
> GET / HTTP/1.1
> Authorization: Negotiate YEAGBisGAQUFAqA2MDSgDjA...
...
< HTTP/1.1 401 Unauthorized
* gss_init_sec_context() failed: Not a user credential type.
< WWW-Authenticate: Negotiate oYIBDzCCAQugAwoBAaEMBgorBgEEAY...

What should happen here, of course, is that the request is resubmitted with the NTLMSSP response:
> Authorization: Negotiate oYIBxTCCAcGgAwoBAaKCAaQEg

But gss-ntlmssp bailed out with that 'Not a user credential type' error.

I'm testing with a simple $NTLM_USER_FILE set; not via winbind.

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in gss-ntlmssp (Ubuntu):
status: New → Confirmed
Revision history for this message
Timo Aaltonen (tjaalton) wrote :

The config fail and path have been fixed in 0.7.0-3 which is in zesty, don't know about the rest though.. might've been fixed by the new release.

Eric Desrochers (slashd)
description: updated
description: updated
Revision history for this message
Timo Aaltonen (tjaalton) wrote :

could you test with the package in xenial-proposed?

Changed in gss-ntlmssp (Ubuntu):
status: Confirmed → Incomplete
Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for gss-ntlmssp (Ubuntu) because there has been no activity for 60 days.]

Changed in gss-ntlmssp (Ubuntu):
status: Incomplete → Expired
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.