[Pkg-openldap-devel] Bug#917129: slapd-smbk5pwd: crashes when enabling krb5

[Ryan Tandy]

Control: reassign -1 libsasl2-2 2.1.27~rc8-1
Control: affects -1 slapd-smbk5pwd

Dear cyrus-sasl2 maintainers,

The latest version of libsasl2-2 seems to have gained dependencies on 
MIT Kerberos libraries. This breaks slapd-smbk5pwd, which links with 
Heimdal libraries (directly) and libsasl (indirectly via libldap) and 
then calls functions exported by both (krb5_init_context). See details 
quoted below.

I'm hoping this is just a bug and can be fixed. If it's an intentional 
change, and not likely to be reverted, then I'd appreciate any advice 
you could offer on how I should approach it from my end...

Thank you,
Ryan

On Sat, Dec 22, 2018 at 10:46:00PM -0800, Ryan Tandy wrote:
>Thread 3 "slapd" hit Breakpoint 1, 0x00007ffff741a1c0 in krb5_init_context ()
>  from /usr/lib/x86_64-linux-gnu/libkrb5.so.3
>(gdb) bt
>#0  0x00007ffff741a1c0 in krb5_init_context () from /usr/lib/x86_64-linux-gnu/libkrb5.so.3
>#1  0x00007ffff68e486c in smbk5pwd_modules_init (pi=<optimized out>) at smbk5pwd.c:1000
>
>That is the wrong krb5_init_context, we want the Heimdal one!
>
># ldd /usr/lib/ldap/smbk5pwd.so | grep krb5
>	libkrb5.so.26 => /usr/lib/x86_64-linux-gnu/libkrb5.so.26 (0x00007f78ce2f3000)
>	libgssapi_krb5.so.2 => /usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2 (0x00007f78cdb87000)
>	libkrb5.so.3 => /usr/lib/x86_64-linux-gnu/libkrb5.so.3 (0x00007f78cdaaa000)
>	libkrb5support.so.0 => /usr/lib/x86_64-linux-gnu/libkrb5support.so.0 (0x00007f78cd340000)
>
>This looks like a change in libsasl2-2:
>
>Package: libsasl2-2
>Version: 2.1.27~101-g0780600+dfsg-3
>Depends: libsasl2-modules-db (>= 2.1.27~101-g0780600+dfsg-3), libc6 (>= 2.15)
>
>Package: libsasl2-2
>Version: 2.1.27~rc8-1
>Depends: libsasl2-modules-db (>= 2.1.27~rc8-1), libc6 (>= 2.15), libcom-err2 (>= 1.43.9), libgssapi-krb5-2 (>= 1.6.dfsg.2), libk5crypto3 (>= 1.6.dfsg.2), libkrb5-3 (>= 1.6.dfsg.2)