php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login

go to bug id or search bugs for

Request #76380 Error reporting from php-pecl-krb5 incomplete
Submitted: 2018-05-27 00:12 UTC Modified: 2021-02-12 14:42 UTC
From: mike at flyn dot org Assigned: mbechler (profile)
Status: Closed Package: PECL (PECL)
PHP Version: 7.2.6 OS: Linux
Private report: No CVE-ID: None
View Developer Edit
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: mike at flyn dot org
New email:
PHP Version: OS:

 

 [2018-05-27 00:12 UTC] mike at flyn dot org 
Description:
------------
I have been configuring the Roundcube webmail system to authenticate using Kerberos, and I found myself doing some experiments to figure out a misconfiguration. The error reporting from php-pecl-krb5 was missing some key information that would have made this task easier.

I found the following in my logs:

May 26 13:37:18 herald roundcube: PHP Warning:  GSSAPIContext::initSecContext(): Unspecified GSS failure.  Minor code may provide more information (851968,2529639066) in /.../mail/program/lib/Roundcube/rcube_imap_generic.php on line 644

It seems the function which implements initSecContext() in gssapi.c does not print the error which returns from gss_init_sec_context(). Instead, it looks like the library prints no error until after the calls to gss_release_name() and gss_release_buffer(); this results in the ambiguous error above. Adding an error printing call immediately after gss_init_sec_context() allowed me to realize that the actual error was:

... Cannot find KDC for realm ...

This message made it much easier to realize that /etc/krb5.conf contained an error.

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2018-06-02 15:28 UTC] mbechler at eenterphace dot org 
Hi,


thanks, good catch ... these cleanup functions were overwriting the minor_status. Should be fixed in SVN.
 [2021-02-12 14:42 UTC] cmb@php.net
-Status: Open +Status: Closed -Assigned To: +Assigned To: mbechler
 [2021-02-12 14:42 UTC] cmb@php.net 
Apparently fixed as of krb5 1.1.3.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved. 		Last updated: Thu Dec 26 13:01:30 2024 UTC