[sasl 0005262]: sasl: Specified keytab in sasl config file not used

Mantis Bug Tracker via bug-notifications bug-notifications at lists.opencsw.org
Fri Nov 20 17:59:34 CET 2015


The following issue has been SUBMITTED. 
====================================================================== 
https://www.opencsw.org/mantis/view.php?id=5262 
====================================================================== 
Reported By:                sfozz
Assigned To:                
====================================================================== 
Project:                    sasl
Issue ID:                   5262
Category:                   regular use
Reproducibility:            always
Severity:                   feature
Priority:                   normal
Status:                     new
====================================================================== 
Date Submitted:             2015-11-20 17:59 CET
Last Modified:              2015-11-20 17:59 CET
====================================================================== 
Summary:                    sasl: Specified keytab in sasl config file not used
Description: 
If you specify a kerberos keytab in a sasl config file then it doesn't get
used. The systems default one is used instead, /etc/krb5.keyab.

for example /opt/csw/lib/sasl2/Sendmail.conf contains the following:

pwcheck_method: saslauthd
keytab: /etc/smtp.keytab
mech_list: login plain gssapi

but trussing the process I see:

4296:   stat("/etc/opt/csw/krb5.conf", 0xFFBF8A20)      = 0
4296:   open("/etc/opt/csw/krb5.conf", O_RDONLY)        = 15
4296:   open("/dev/urandom", O_RDONLY)                  = 15
4296:   open("/etc/krb5.keytab", O_RDONLY)              = 15

There is a report of this issue in redhats bugzilla:
https://bugzilla.redhat.com/show_bug.cgi?id=234309
https://bugzilla.redhat.com/show_bug.cgi?id=200892

See: https://bugzilla.redhat.com/attachment.cgi?id=133396 for details

======================================================================



More information about the bug-notifications mailing list