php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #76380 Error reporting from php-pecl-krb5 incomplete
Submitted: 2018-05-27 00:12 UTC Modified: 2021-02-12 14:42 UTC
From: mike at flyn dot org Assigned: mbechler (profile)
Status: Closed Package: PECL (PECL)
PHP Version: 7.2.6 OS: Linux
Private report: No CVE-ID: None
View Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
If you reported this bug, you can edit this bug over here.
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: mike at flyn dot org
New email:
PHP Version: OS:

 

 [2018-05-27 00:12 UTC] mike at flyn dot org 
Description:
------------
I have been configuring the Roundcube webmail system to authenticate using Kerberos, and I found myself doing some experiments to figure out a misconfiguration. The error reporting from php-pecl-krb5 was missing some key information that would have made this task easier.

I found the following in my logs:

May 26 13:37:18 herald roundcube: PHP Warning:  GSSAPIContext::initSecContext(): Unspecified GSS failure.  Minor code may provide more information (851968,2529639066) in /.../mail/program/lib/Roundcube/rcube_imap_generic.php on line 644

It seems the function which implements initSecContext() in gssapi.c does not print the error which returns from gss_init_sec_context(). Instead, it looks like the library prints no error until after the calls to gss_release_name() and gss_release_buffer(); this results in the ambiguous error above. Adding an error printing call immediately after gss_init_sec_context() allowed me to realize that the actual error was:

... Cannot find KDC for realm ...

This message made it much easier to realize that /etc/krb5.conf contained an error.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2018-06-02 15:28 UTC] mbechler at eenterphace dot org 
Hi,


thanks, good catch ... these cleanup functions were overwriting the minor_status. Should be fixed in SVN.
 [2021-02-12 14:42 UTC] cmb@php.net
-Status: Open +Status: Closed -Assigned To: +Assigned To: mbechler
 [2021-02-12 14:42 UTC] cmb@php.net 
Apparently fixed as of krb5 1.1.3.
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved. 		Last updated: Fri Oct 31 08:00:01 2025 UTC