Ubuntu
libnss-ldap package

  1. Bug #179440
  2. Comment #2

Comment 2 for bug 179440

Revision history for this message
Karoly Molnar (karoly-molnar) wrote :

The upstream code is broken.

Bug description:
The code that checks the keytab file is not handling the output of the krb5_kt_get_name function call properly. The developer expected only the file name in the output as it is with the krb5_cc_get_name function. However the output of this function is "<prefix>:<name of the key table>" hence the next function call which checks that the file is accessible with the given UID and GID fails miserably.

I created a patch and with it everything works as expected. The package is updated on my PPA and will be going under heavy test soon.

Next task is to push the fix upstream.