Package: libgssapi-krb5-2
Version: 1.10+dfsg~alpha1-5
Severity: normal

Hi,

First, I'm not sure libgssapi-krb5-2 is the correct package to report
this bug against; maybe it's another krb5 package or even openssh.

I used to connect to a private-IP remote machine through a public-IP
remote machine using the netcat bounce method. This is done with this
configuration in the ssh configuration file:

 ProxyCommand ssh user@public.machine "nc -q 0 private.machine %p"

With the update of krb5 packages to 1.10+dfsg~alpha1, this no longer
works and ssh segfaults. Run in verbose mode, the error is:

 [...]
 debug1: No valid Key exchange context
 debug1: Next authentication method: gssapi-with-mic
 Erreur de segmentation

To prevent ssh from segfaulting, one can disable gss with:

 GSSAPIAuthentication no

in the configuration file.

If I downgrade krb5 packages to 1.9 version, there is no problems.

I also tried to recompile openssh against new krb5 package, but that
did not solve the problem.

Yannick

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.1.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages libgssapi-krb5-2 depends on:
ii  libc6              2.13-21           
ii  libcomerr2         1.42-1            
ii  libk5crypto3       1.10+dfsg~alpha1-5
ii  libkeyutils1       1.5.2-2           
ii  libkrb5-3          1.10+dfsg~alpha1-5
ii  libkrb5support0    1.10+dfsg~alpha1-5
ii  multiarch-support  2.13-21           

libgssapi-krb5-2 recommends no packages.

Versions of packages libgssapi-krb5-2 suggests:
pn  krb5-doc   <none>
pn  krb5-user  <none>

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to