[Bug 1347147] Re: krb5 database propagation enters infinite loop
This problem is broader than slave KDCs; it can potentially affect any
write operation on a KDC with sufficiently many (more than a few
hundred) principals, causing database corruption or denial of service.
Altering the test case to create one principal per invocation of
kadmin.local shows that the spin condition depends on database contents
rather than process memory history.
It also manifests during krb5_db_get_principal(), not just
krb5_db_put_principal(), as shown in the below stack trace. Note the
krb5_db_get_principal() call in the stack trace is the one that is meant
to verify the master key.
Altered test case showing the spin condition on a fresh kadmin.local
invocation:
kdb5_util -W -r T create -s
awk 'BEGIN { for (i = 0; i 1024; i++) { printf(%06d\n, i) } }' /dev/null |
(set -e; while read p; do kadmin.local -r T -q ank -randkey $p; done)
I still recommend preferring the test case I gave in comment #1 because
it executes more quickly.
kadmin.local stack trace:
(gdb) bt
#0 0x7f3fa70dbcbc in ?? ()
from /usr/lib/x86_64-linux-gnu/krb5/plugins/kdb/db2.so
#1 0x7f3fa70d90bc in ?? ()
from /usr/lib/x86_64-linux-gnu/krb5/plugins/kdb/db2.so
#2 0x7f3fa70d7bc9 in ?? ()
from /usr/lib/x86_64-linux-gnu/krb5/plugins/kdb/db2.so
#3 0x7f3fa70d0ab6 in ?? ()
from /usr/lib/x86_64-linux-gnu/krb5/plugins/kdb/db2.so
#4 0x7f3fa70d1bf4 in ?? ()
from /usr/lib/x86_64-linux-gnu/krb5/plugins/kdb/db2.so
#5 0x7f3fa79d0047 in krb5_db_get_principal ()
from /usr/lib/x86_64-linux-gnu/libkdb5.so.7
#6 0x7f3fa79d365b in ?? () from /usr/lib/x86_64-linux-gnu/libkdb5.so.7
#7 0x7f3fa79d02c0 in krb5_db_fetch_mkey_list ()
from /usr/lib/x86_64-linux-gnu/libkdb5.so.7
#8 0x7f3fa9140f78 in kdb_init_master ()
from /usr/lib/x86_64-linux-gnu/libkadm5srv_mit.so.9
#9 0x7f3fa9141e90 in kadm5_init ()
from /usr/lib/x86_64-linux-gnu/libkadm5srv_mit.so.9
#10 0x00404659 in ?? ()
#11 0x00402bbc in ?? ()
#12 0x7f3fa8263ec5 in __libc_start_main (main=0x402b70, argc=5,
argv=0x7fff76716738, init=optimized out, fini=optimized out,
rtld_fini=optimized out, stack_end=0x7fff76716728) at libc-start.c:287
#13 0x00402c96 in ?? ()
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to krb5 in Ubuntu.
https://bugs.launchpad.net/bugs/1347147
Title:
krb5 database propagation enters infinite loop
To manage notifications about this bug go to:
https://bugs.launchpad.net/gcc/+bug/1347147/+subscriptions
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
This problem is broader than slave KDCs; it can potentially affect any
write operation on a KDC with sufficiently many (more than a few
hundred) principals, causing database corruption or denial of service.
Altering the test case to create one principal per invocation of
kadmin.local shows that the spin condition depends on database contents
rather than process memory history.
It also manifests during krb5_db_get_principal(), not just
krb5_db_put_principal(), as shown in the below stack trace. Note the
krb5_db_get_principal() call in the stack trace is the one that is meant
to verify the master key.
Altered test case showing the spin condition on a fresh kadmin.local
invocation:
kdb5_util -W -r T create -s
awk 'BEGIN { for (i = 0; i 1024; i++) { printf(%06d\n, i) } }' /dev/null |
(set -e; while read p; do kadmin.local -r T -q ank -randkey $p; done)
I still recommend preferring the test case I gave in comment #1 because
it executes more quickly.
kadmin.local stack trace:
(gdb) bt
#0 0x7f3fa70dbcbc in ?? ()
from /usr/lib/x86_64-linux-gnu/krb5/plugins/kdb/db2.so
#1 0x7f3fa70d90bc in ?? ()
from /usr/lib/x86_64-linux-gnu/krb5/plugins/kdb/db2.so
#2 0x7f3fa70d7bc9 in ?? ()
from /usr/lib/x86_64-linux-gnu/krb5/plugins/kdb/db2.so
#3 0x7f3fa70d0ab6 in ?? ()
from /usr/lib/x86_64-linux-gnu/krb5/plugins/kdb/db2.so
#4 0x7f3fa70d1bf4 in ?? ()
from /usr/lib/x86_64-linux-gnu/krb5/plugins/kdb/db2.so
#5 0x7f3fa79d0047 in krb5_db_get_principal ()
from /usr/lib/x86_64-linux-gnu/libkdb5.so.7
#6 0x7f3fa79d365b in ?? () from /usr/lib/x86_64-linux-gnu/libkdb5.so.7
#7 0x7f3fa79d02c0 in krb5_db_fetch_mkey_list ()
from /usr/lib/x86_64-linux-gnu/libkdb5.so.7
#8 0x7f3fa9140f78 in kdb_init_master ()
from /usr/lib/x86_64-linux-gnu/libkadm5srv_mit.so.9
#9 0x7f3fa9141e90 in kadm5_init ()
from /usr/lib/x86_64-linux-gnu/libkadm5srv_mit.so.9
#10 0x00404659 in ?? ()
#11 0x00402bbc in ?? ()
#12 0x7f3fa8263ec5 in __libc_start_main (main=0x402b70, argc=5,
argv=0x7fff76716738, init=optimized out, fini=optimized out,
rtld_fini=optimized out, stack_end=0x7fff76716728) at libc-start.c:287
#13 0x00402c96 in ?? ()
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1347147
Title:
krb5 database propagation enters infinite loop
To manage notifications about this bug go to:
https://bugs.launchpad.net/gcc/+bug/1347147/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
I’ve written a test case that clearly demonstrates the GCC 4.8 bug responsible for the kadmin.local failure: $ gcc-4.8 -Wall -O2 bug.c -o bug $ ./bug $ echo $? 1 $ gcc-4.9 -Wall -O2 bug.c -o bug $ ./bug $ echo $? 0 A git bisection of the GCC source shows that this bug disappeared in https://gcc.gnu.org/r202525. However, I don’t understand why; the fact that r202525 was intended to fix a “missed-optimization” bug (https://gcc.gnu.org/PR58404) is a little bit terrifying. ** Also affects: gcc-4.8 (Ubuntu) Importance: Undecided Status: New ** Attachment added: Reduced test case for GCC 4.8 bug https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/1347147/+attachment/4165776/+files/bug.c -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gcc-4.8/+bug/1347147/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
** Bug watch added: GCC Bugzilla #61964 http://gcc.gnu.org/bugzilla/show_bug.cgi?id=61964 ** Also affects: gcc via http://gcc.gnu.org/bugzilla/show_bug.cgi?id=61964 Importance: Unknown Status: Unknown ** Bug watch added: krbdev.mit.edu/rt/ #7860 http://krbdev.mit.edu/rt/Ticket/Display.html?id=7860 ** Also affects: kerberos via http://krbdev.mit.edu/rt/Ticket/Display.html?id=7860 Importance: Unknown Status: Unknown -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/gcc/+bug/1347147/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
Thank you for taking the time to report this bug and helping to make Ubuntu better. I don't follow all of the conversation here. Is it clear that the workaround suggested (https://github.com/krb5/krb5/commit/26d8744129) is still valid, should be applied to the version of krb5 in Utopic, will fix the version in Utopic, won't introduce any regression, and will be released by upstream? If someone can confirm these things, then we can get it landed in Ubuntu. Next, for Trusty, we need the steps in https://wiki.ubuntu.com/StableReleaseUpdates#Procedure followed - in particular, a test case that has exact steps to reproduce the problem with a slave KDC so that the problem can be verified fixed with the new proposed binary during stable verification testing, and an understanding of impact to users and potential regression risk so that the SRU team can make a decision about whether this fix is acceptable to SRU to Trusty. I understand that this is potentially difficult to reproduce and verify. This is fine and we can be pragmatic about it, but if this is the case then extra clarity around these issues would be appreciated. For verification, we'll still want to exercise the code around the areas changed to make sure that we haven't fundamentally broken anything, and so a test case is still useful even if it comes with the caveat that it may not always fail. Setting to Triaged since upstream consider this a valid bug, and that's good enough for me. I've not set Importance because it isn't clear to me yet what proportion of production krb5-kdc slave users are or would actually be affected. ** Changed in: krb5 (Ubuntu) Status: Confirmed = Triaged -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/gcc/+bug/1347147/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
22:56 tlyu rbasak: do you consider the current test case (comment #1) inadequate? 23:01 rbasak tlyu: I'm sorry. That test case is fine. I missed it when writing my comment. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/gcc/+bug/1347147/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
The workaround suggested (https://github.com/krb5/krb5/commit/26d8744129) is still valid, and appears on upstream's 1.12 release branch already (as https://github.com/krb5/krb5/commit/c7bb9278ad12c9). It will appear in the 1.12.2 release. Furthermore, I have applied it to the Debian packaging as http://anonscm.debian.org/cgit/pkg-k5-afs/debian- krb5-2013.git/commit/?id=3d3bf0c075af62f278b6 (though it has not yet been uploaded to Debian proper). This workaround should not introduce any regressions. I should also note that, if I understand correctly, we expect a no- change rebuild of krb5 using the gcc currently in utopic to also be a valid workaround. However, the gcc in trusty is still expected to produce krb5 packages which exhibit this bug. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/gcc/+bug/1347147/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
Re: [Bug 1347147] Re: krb5 database propagation enters infinite loop
I'm happy to upload a new krb5 to debian so you can sync it if you want that approach. I'm also happy if Ubuntu wants to go with a binary rebuild of krb5. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/gcc/+bug/1347147/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
Re: [Bug 1347147] Re: krb5 database propagation enters infinite loop
Please see https://launchpad.net/~hartmans/+archive/ubuntu/krb5 for trusty packages that should fix the problem. Can I get confirmation from Tom or someone else that without these packages trusty fails the reproduce test in comment #1 and with them, it succeeds the test proposed in comment #1? I'm updating a branch I have for proposed trustry krb5 updates (lp:~hartmans/ubuntu/trusty/krb5/gss-infinite-loop) to include this patch. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/gcc/+bug/1347147/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
Re: [Bug 1347147] Re: krb5 database propagation enters infinite loop
I'm sorry, can I get someone to test the packages at https://launchpad.net/~hartmans/+archive/ubuntu/ubuntu-fixes not the URI I gave in the previous message. I pulled the wrong PPA off my home page. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/gcc/+bug/1347147/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
** Branch linked: lp:~hartmans/ubuntu/trusty/krb5/gss-infinite-loop -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/gcc/+bug/1347147/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
I confirm that the packages at https://launchpad.net/~hartmans/+archive/ubuntu/ubuntu-fixes appear to fix the problem for Trusty amd64, based on the test case in comment #1. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/gcc/+bug/1347147/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
I’ve written a test case that clearly demonstrates the GCC 4.8 bug responsible for the kadmin.local failure: $ gcc-4.8 -Wall -O2 bug.c -o bug $ ./bug $ echo $? 1 $ gcc-4.9 -Wall -O2 bug.c -o bug $ ./bug $ echo $? 0 A git bisection of the GCC source shows that this bug disappeared in https://gcc.gnu.org/r202525. However, I don’t understand why; the fact that r202525 was intended to fix a “missed-optimization” bug (https://gcc.gnu.org/PR58404) is a little bit terrifying. ** Also affects: gcc-4.8 (Ubuntu) Importance: Undecided Status: New ** Attachment added: Reduced test case for GCC 4.8 bug https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/1347147/+attachment/4165776/+files/bug.c -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/gcc-4.8/+bug/1347147/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
** Bug watch added: GCC Bugzilla #61964 http://gcc.gnu.org/bugzilla/show_bug.cgi?id=61964 ** Also affects: gcc via http://gcc.gnu.org/bugzilla/show_bug.cgi?id=61964 Importance: Unknown Status: Unknown ** Bug watch added: krbdev.mit.edu/rt/ #7860 http://krbdev.mit.edu/rt/Ticket/Display.html?id=7860 ** Also affects: kerberos via http://krbdev.mit.edu/rt/Ticket/Display.html?id=7860 Importance: Unknown Status: Unknown -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/gcc/+bug/1347147/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
Thank you for taking the time to report this bug and helping to make Ubuntu better. I don't follow all of the conversation here. Is it clear that the workaround suggested (https://github.com/krb5/krb5/commit/26d8744129) is still valid, should be applied to the version of krb5 in Utopic, will fix the version in Utopic, won't introduce any regression, and will be released by upstream? If someone can confirm these things, then we can get it landed in Ubuntu. Next, for Trusty, we need the steps in https://wiki.ubuntu.com/StableReleaseUpdates#Procedure followed - in particular, a test case that has exact steps to reproduce the problem with a slave KDC so that the problem can be verified fixed with the new proposed binary during stable verification testing, and an understanding of impact to users and potential regression risk so that the SRU team can make a decision about whether this fix is acceptable to SRU to Trusty. I understand that this is potentially difficult to reproduce and verify. This is fine and we can be pragmatic about it, but if this is the case then extra clarity around these issues would be appreciated. For verification, we'll still want to exercise the code around the areas changed to make sure that we haven't fundamentally broken anything, and so a test case is still useful even if it comes with the caveat that it may not always fail. Setting to Triaged since upstream consider this a valid bug, and that's good enough for me. I've not set Importance because it isn't clear to me yet what proportion of production krb5-kdc slave users are or would actually be affected. ** Changed in: krb5 (Ubuntu) Status: Confirmed = Triaged -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/gcc/+bug/1347147/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
22:56 tlyu rbasak: do you consider the current test case (comment #1) inadequate? 23:01 rbasak tlyu: I'm sorry. That test case is fine. I missed it when writing my comment. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/gcc/+bug/1347147/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
The workaround suggested (https://github.com/krb5/krb5/commit/26d8744129) is still valid, and appears on upstream's 1.12 release branch already (as https://github.com/krb5/krb5/commit/c7bb9278ad12c9). It will appear in the 1.12.2 release. Furthermore, I have applied it to the Debian packaging as http://anonscm.debian.org/cgit/pkg-k5-afs/debian- krb5-2013.git/commit/?id=3d3bf0c075af62f278b6 (though it has not yet been uploaded to Debian proper). This workaround should not introduce any regressions. I should also note that, if I understand correctly, we expect a no- change rebuild of krb5 using the gcc currently in utopic to also be a valid workaround. However, the gcc in trusty is still expected to produce krb5 packages which exhibit this bug. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/gcc/+bug/1347147/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 1347147] Re: krb5 database propagation enters infinite loop
I'm happy to upload a new krb5 to debian so you can sync it if you want that approach. I'm also happy if Ubuntu wants to go with a binary rebuild of krb5. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/gcc/+bug/1347147/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 1347147] Re: krb5 database propagation enters infinite loop
Please see https://launchpad.net/~hartmans/+archive/ubuntu/krb5 for trusty packages that should fix the problem. Can I get confirmation from Tom or someone else that without these packages trusty fails the reproduce test in comment #1 and with them, it succeeds the test proposed in comment #1? I'm updating a branch I have for proposed trustry krb5 updates (lp:~hartmans/ubuntu/trusty/krb5/gss-infinite-loop) to include this patch. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/gcc/+bug/1347147/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Re: [Bug 1347147] Re: krb5 database propagation enters infinite loop
I'm sorry, can I get someone to test the packages at https://launchpad.net/~hartmans/+archive/ubuntu/ubuntu-fixes not the URI I gave in the previous message. I pulled the wrong PPA off my home page. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/gcc/+bug/1347147/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
** Branch linked: lp:~hartmans/ubuntu/trusty/krb5/gss-infinite-loop -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/gcc/+bug/1347147/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
I confirm that the packages at https://launchpad.net/~hartmans/+archive/ubuntu/ubuntu-fixes appear to fix the problem for Trusty amd64, based on the test case in comment #1. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/gcc/+bug/1347147/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
Test case:
On Ubuntu 14.04 on amd64, install krb5-admin-server and krb5-kdc.
kdb5_util -W -r T create -s
awk 'BEGIN{ for (i = 0; i 1024; i++) { printf(ank -randkey a%06d\n, i) } }'
/dev/null | kadmin.local -r T
For me, kadmin.local begins consuming nearly 100% CPU starting at
a000762. This implies that sites with more than a few hundred
principals are likely to find running a KDC using the 14.04 krb5
packages impossible.
** Changed in: krb5 (Ubuntu)
Status: New = Confirmed
--
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to krb5 in Ubuntu.
https://bugs.launchpad.net/bugs/1347147
Title:
krb5 database propagation enters infinite loop
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/1347147/+subscriptions
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
Note that krb5 in utopic amd64 was compiled against gcc 4.9.0-10ubuntu2 (build log: https://launchpadlibrarian.net/179748030/buildlog_ubuntu- utopic-amd64.krb5_1.12.1%2Bdfsg-3ubuntu1_UPLOADING.txt.gz). So it looks like it might be wrong to believe that GCC 4.9 does not induce this problem. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/1347147/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
Reproduced on current utopic amd64, with the same results, kadmin.local spinning at 100% CPU on a000762. ** Tags added: regression-release testcase trusty utopic -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/1347147/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
However, the problem seems to go away after locally recompiling krb5 1.12.1+dfsg-3ubuntu1 with gcc-4.9 4.9.1-3ubuntu2. (This could still indicate any number of things, though.) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/1347147/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
Sorry, I read the build log incorrectly in comment #3. krb5 in utopic amd64 was actually compiled against gcc-4.8 4.8.3-4ubuntu2. So the belief may still be valid. (I was misled because the metapackage gcc 4:4.9.0-3ubuntu5 actually installed a symlink to gcc-4.8, despite the version number.) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to krb5 in Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/1347147/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
Test case:
On Ubuntu 14.04 on amd64, install krb5-admin-server and krb5-kdc.
kdb5_util -W -r T create -s
awk 'BEGIN{ for (i = 0; i 1024; i++) { printf(ank -randkey a%06d\n, i) } }'
/dev/null | kadmin.local -r T
For me, kadmin.local begins consuming nearly 100% CPU starting at
a000762. This implies that sites with more than a few hundred
principals are likely to find running a KDC using the 14.04 krb5
packages impossible.
** Changed in: krb5 (Ubuntu)
Status: New = Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1347147
Title:
krb5 database propagation enters infinite loop
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/1347147/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
Reproduced on current utopic amd64, with the same results, kadmin.local spinning at 100% CPU on a000762. ** Tags added: regression-release testcase trusty utopic -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/1347147/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
Note that krb5 in utopic amd64 was compiled against gcc 4.9.0-10ubuntu2 (build log: https://launchpadlibrarian.net/179748030/buildlog_ubuntu- utopic-amd64.krb5_1.12.1%2Bdfsg-3ubuntu1_UPLOADING.txt.gz). So it looks like it might be wrong to believe that GCC 4.9 does not induce this problem. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/1347147/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
However, the problem seems to go away after locally recompiling krb5 1.12.1+dfsg-3ubuntu1 with gcc-4.9 4.9.1-3ubuntu2. (This could still indicate any number of things, though.) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/1347147/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1347147] Re: krb5 database propagation enters infinite loop
Sorry, I read the build log incorrectly in comment #3. krb5 in utopic amd64 was actually compiled against gcc-4.8 4.8.3-4ubuntu2. So the belief may still be valid. (I was misled because the metapackage gcc 4:4.9.0-3ubuntu5 actually installed a symlink to gcc-4.8, despite the version number.) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1347147 Title: krb5 database propagation enters infinite loop To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/1347147/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
