[Bug 395938] Re: cupsd crashes when pam_krb5 is used

[Russ Allbery]

Alex Mauer <hawke at hawkesnest.net> writes:

> Actually it's a duplicate of bug #324645 -- but that bug is supposedly
> fixed in cups 1.3.9-15 (I'm using 1.3.9-17).
>
> But removing apparmor did fix the problem.

The segfault is from incorrect error handling after a failure in the
Kerberos ticket cache functions.  I think the following patch to
libpam-krb5 will fix the segfault.

--- a/cache.c
+++ b/cache.c
@@ -143,8 +143,10 @@ pamk5_cache_init(struct pam_args *args, const char *ccname, krb5_creds *creds,
     }
 
 done:
-    if (retval != PAM_SUCCESS && *cache != NULL)
+    if (retval != PAM_SUCCESS && *cache != NULL) {
         krb5_cc_destroy(ctx->context, *cache);
+        *cache = NULL;
+    }
     return retval;
 }

If you're using pam-krb5 with cupsd solely for authentication and don't
need to save a ticket cache for the user, the PAM option no_ccache will
avoid the need for an apparmor profile that enables writes to /tmp.

-- 
Russ Allbery (rra at debian.org)               <http://www.eyrie.org/~eagle/>

-- 
cupsd crashes when pam_krb5 is used
https://bugs.launchpad.net/bugs/395938
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs at lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs