Re: BUG #5121: Segmentation Fault when using pam w/ krb5

Ok... I compiled 8.2.14 and 8.3.8 with the same configure options. They
both segfaut when doing the authentication. Note that when I use -W
option with psql everything works ok. I went back to 8.4.1 enabled the
max debug level then re-tested and got the info below in the log. I went
to line 769 in pqcomm.c and commented the ereport and return EOF lines
and recompiled. Now when I connect it works without a segfault. Hope
this narrows things down.

----- Pqcomm.c ----

/*
* Careful: an ereport() that tries to write to
the client would
* cause recursion to here, leading to stack
overflow and core
* dump! This message must go *only* to the
postmaster log.
*/
/* ereport(COMMERROR,
(errcode_for_socket_access(),
errmsg("could not receive data
from client: %m")));
return EOF; */

------ postgresql log -----
.
.
.
<@ 2009-10-15 23:39:06.725 EDT>DEBUG: 00000: forked new backend,
pid=23184 socket=8
<@ 2009-10-15 23:39:06.725 EDT>LOCATION: BackendStartup,
postmaster.c:3083
<[unknown](at)[unknown] 2009-10-15 23:39:06.726 EDT>LOG: 00000:
connection received: host=10.0.20.38 port=36929
<[unknown](at)[unknown] 2009-10-15 23:39:06.726 EDT>LOCATION:
BackendInitialize, postmaster.c:3259
<[unknown](at)[unknown] 10.0.20.38(36929) 2009-10-15 23:39:06.754
EDT>DEBUG: 00000: SSL connection from "(anonymous)"
<[unknown](at)[unknown] 10.0.20.38(36929) 2009-10-15 23:39:06.754
EDT>LOCATION: open_server_SSL, be-secure.c:961
<rdouglas(at)tacacs 10.0.20.38(36929) 2009-10-15 23:39:06.759 EDT>DEBUG:
00000: SSL: read alert (0x0100)
<rdouglas(at)tacacs 10.0.20.38(36929) 2009-10-15 23:39:06.759 EDT>LOCATION:
info_cb, be-secure.c:699
<rdouglas(at)tacacs 10.0.20.38(36929) 2009-10-15 23:39:06.759 EDT>LOG:
08006: could not receive data from client: Connection reset by peer
<rdouglas(at)tacacs 10.0.20.38(36929) 2009-10-15 23:39:06.759 EDT>LOCATION:
pq_recvbuf, pqcomm.c:769
<@ 2009-10-15 23:39:20.546 EDT>DEBUG: 00000: reaping dead processes
<@ 2009-10-15 23:39:20.546 EDT>LOCATION: reaper, postmaster.c:2236
<@ 2009-10-15 23:39:20.546 EDT>DEBUG: 00000: server process (PID
23184) was terminated by signal 11: Segmentation fault
<@ 2009-10-15 23:39:20.546 EDT>LOCATION: LogChildExit,
postmaster.c:2725
<@ 2009-10-15 23:39:20.546 EDT>LOG: 00000: server process (PID 23184)
was terminated by signal 11: Segmentation fault
<@ 2009-10-15 23:39:20.546 EDT>LOCATION: LogChildExit,
postmaster.c:2725
<@ 2009-10-15 23:39:20.546 EDT>LOG: 00000: terminating any other
active server processes
.
.
.

-----Original Message-----
From: Tom Lane [mailto:tgl(at)sss(dot)pgh(dot)pa(dot)us]
Sent: Thursday, October 15, 2009 7:26 PM
To: Douglas, Ryan
Cc: Magnus Hagander
Subject: Re: [BUGS] BUG #5121: Segmentation Fault when using pam w/ krb5

"Douglas, Ryan" <RDouglas(at)arbinet(dot)com> writes:
> My krb5.conf points to MS Active Directory...

Oh, that's *definitely* relevant information. I have no idea how well
tested that combination is. Magnus, can you comment on whether there
might be bugs in the combination of PG 8.4.1, Fedora 11 PAM libraries,
and an MS controller?

regards, tom lane