[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#476402: kdebase-bin: kcheckpass does not update Kerberos ticket cache

Package: kdebase-bin
Version: 4:3.5.5a.dfsg.1-6etch2
Severity: normal

I'm using pam_krb5, and kcheckpass checks password using it. However,
additionally to checking passwords, pam_krb5 provides other useful
functionality: it stores the Kerberos ticket obtained from KDC in a file
pointed by environment variable KRB5CCNAME.

With all other screensavers/screenlockers, it works just fine:
- xdm/kdm/gdm obtains ticket and sets KRB5CCNAME to point to the ticket
- xscreensaver/gnome-screensaver/xlockmore obtains new ticket and
updates the content of $KRB5CCNAME, without changing path to the ticket
So, user with screenlocker usually should not care about obtaining new
tickets via kinit; all "just works".  With KDE users who lock their
screen with Ctrl-Alt-L, password is checked correctly, but the ticket
cache is not updated.

Looking on ltrace of kcheckpass, I see that it creates its own ticket
cache file and destroys this file at the end.  Also note, that it is not
a bug in pam_krb5, but in a way how kcheckpass uses PAM, because all
other screensavers work correctly.

I have not really looked in the source code, but I can do it; please,
ask any information I forget to provide to you.

libpam-krb5 is 2.6-1 from etch.

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (900, 'stable')
Architecture: amd64 (x86_64)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-6-amd64
Locale: LANG=, LC_CTYPE=ru_RU.UTF-8 (charmap=UTF-8)

Versions of packages kdebase-bin depends on:
ii  kdelibs4c2a       4:3.5.5a.dfsg.1-8etch1 core libraries and binaries for al
ii  libacl1           2.2.41-1               Access control list shared library
ii  libart-2.0-2      2.3.17-1               Library of functions for 2D graphi
ii  libattr1          2.4.32-1               Extended attribute shared library
ii  libaudio2         1.8-4                  The Network Audio System (NAS). (s
ii  libc6             2.3.6.ds1-13etch5      GNU C Library: Shared libraries
ii  libfontconfig1    2.4.2-1.2              generic font configuration library
ii  libfreetype6      2.2.1-5+etch2          FreeType 2 font engine, shared lib
ii  libgamin0 [libfam 0.1.8-2                Client library for the gamin file 
ii  libgcc1           1:4.1.1-21             GCC support library
ii  libice6           1:1.0.1-2              X11 Inter-Client Exchange library
ii  libidn11          0.6.5-1                GNU libidn library, implementation
ii  libjpeg62         6b-13                  The Independent JPEG Group's JPEG 
ii  libpam-runtime    0.79-5                 Runtime support for the PAM librar
ii  libpam0g          0.79-5                 Pluggable Authentication Modules l
ii  libpng12-0        1.2.15~beta5-1         PNG library - runtime
ii  libqt3-mt         3:3.3.7-4etch1         Qt GUI Library (Threaded runtime v
ii  libsm6            1:1.0.1-3              X11 Session Management library
ii  libstdc++6        4.1.1-21               The GNU Standard C++ Library v3
ii  libx11-6          2:1.0.3-7              X11 client-side library
ii  libxcursor1       1.1.7-4                X cursor management library
ii  libxext6          1:1.0.1-2              X11 miscellaneous extension librar
ii  libxft2               FreeType-based font drawing librar
ii  libxi6            1:1.0.1-4              X11 Input extension library
ii  libxinerama1      1:1.0.1-4.1            X11 Xinerama extension library
ii  libxkbfile1       1:1.0.3-2              X11 keyboard file manipulation lib
ii  libxrandr2        2:            X11 RandR extension library
ii  libxrender1       1:0.9.1-3              X Rendering Extension client libra
ii  libxt6            1:1.0.2-2              X11 toolkit intrinsics library
ii  libxtst6          1:1.0.1-5              X11 Testing -- Resource extension 
ii  zlib1g            1:1.2.3-13             compression library - runtime

Versions of packages kdebase-bin recommends:
ii  gdb                        6.4.90.dfsg-1 The GNU Debugger

-- no debconf information

Alexandra N. Kossovsky, software engineer.
e-mail: sasha@sanechka.spb.ru

Reply to: