experiences with auth_krb5, MIT Kerberos, Solaris

[Todd Olson]

Hi

Since 2005 we were successfully using auth_krb5 with nnrpd on a Solaris 9
sparc system.  Then in 2008 June we applied a bunch of Sun patches, that
among other things replaced a bunch of Solaris' system libraries.  At 
that point auth_krb5 failed with segfaults.  Oddly the kerberos call
was successfully made and response received.  It was after that that
the segfault occurred.

Ultimately the solution was to update our MIT kerberos library from 
version 1.4 to version 1.6.3.    Just recompiling the code that we
had did not resolve the problem ... we had to get new code.


We suspect that one of the updated Solaris libraries revealed
a memory management problem in the MIT kerberos 1.4 library
that was apparently fixed by at least v 1.6.3.


Regards,
Todd Olson
Cornell University