** Description changed: tracking bug https://bugs.launchpad.net/ubuntu/+source/adsys/+bug/2078245 [ Impact ] Even if the krb5 ticket is discoverable, the discovery fails (but actually succeeded) So we cannot retrieve the policies or do any action with the controller. [ Test Plan ] This is not something that can be easily reproduced in a real environment, so the best approach to reproduce this issue is: - 1. Get adsys codebase before the fix. You can do this by getting the available version in the archive with `apt source adsys`. - 2. Run the TestTicketPath test located in internal/ad/krb5_test.go as many times as needed to get the failure (using `go test -run TestTicketPatch -count X` inside the mentioned directory runs the test X times). + 1. Get adsys codebase before the fix. You can do this by getting the available version in the archive with the command: + apt source adsys + 2. Run the TestTicketPath test located in internal/ad/krb5_test.go as many times as needed to get the failure. To run the test, open a terminal and, inside the mentioned directory, runs the test X times with the command: + go test -run TestTicketPatch -count X 3. The test can fail due to krb5_init_context changing the errno without returning any error. + + Without the patched version the test will fail after a number of runs. + With the patch, it will not fail. [ Where problems could occur ] We now reset errno to 0, because krb5_init_context() can alter it, even if it succeeds. So the discovery always returns success when it succeeds. Worst case would be that discovery failed but errno is set to 0 but this is handled earlier in the code.
-- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2078473 Title: Discovery of KRB5 ticket fails even if ticket is discoverable To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/adsys/+bug/2078473/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
