From cy@cschuber.net.gov.bc.ca  Sun Nov  8 15:00:16 1998
Received: from point.osg.gov.bc.ca (point.osg.gov.bc.ca [142.32.102.44])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id PAA03794
          for <FreeBSD-gnats-submit@freebsd.org>; Sun, 8 Nov 1998 15:00:15 -0800 (PST)
          (envelope-from cy@cschuber.net.gov.bc.ca)
Received: (from daemon@localhost)
	by point.osg.gov.bc.ca (8.9.1/8.8.8) id NAA08223
	for <FreeBSD-gnats-submit@freebsd.org>; Sun, 8 Nov 1998 13:48:27 -0800
Received: from passer.osg.gov.bc.ca(142.32.110.29)
 via SMTP by point.osg.gov.bc.ca, id smtpda08221; Sun Nov  8 13:48:11 1998
Received: (from uucp@localhost)
	by passer.osg.gov.bc.ca (8.9.1/8.9.1) id NAA02462
	for <FreeBSD-gnats-submit@freebsd.org>; Sun, 8 Nov 1998 13:48:11 -0800 (PST)
Received: from cschuber.net.gov.bc.ca(142.31.240.113), claiming to be "cwsys.cwsent.com"
 via SMTP by passer.osg.gov.bc.ca, id smtpdWC2460; Sun Nov  8 13:47:12 1998
Received: (from cy@localhost)
	by cwsys.cwsent.com (8.9.1/8.9.1) id NAA00545;
	Sun, 8 Nov 1998 13:47:10 -0800 (PST)
Message-Id: <199811082147.NAA00545@cwsys.cwsent.com>
Date: Sun, 8 Nov 1998 13:47:10 -0800 (PST)
From: Cy Schubert <cy@cschuber.net.gov.bc.ca>
Reply-To: cschuber@uumail.gov.bc.ca
To: FreeBSD-gnats-submit@freebsd.org
Subject: krb5 port eklogin error
X-Send-Pr-Version: 3.2

>Number:         8609
>Category:       ports
>Synopsis:       eklogin service (kerberos klogind) fails to print DES msg
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    nectar
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sun Nov  8 15:10:00 PST 1998
>Closed-Date:    Fri Jul 20 06:15:50 PDT 2001
>Last-Modified:  Fri Jul 20 06:17:10 PDT 2001
>Originator:     Cy Schubert
>Release:        FreeBSD 2.2.7-RELEASE i386
>Organization:
ITSD, Province of British Columbia
>Environment:

	FreeBSD cwsys 2.2.7-RELEASE FreeBSD 2.2.7-RELEASE #0: Sat Oct 31 09:57:33 PST 1998     root@cwsys:/opt/usr_src/sys/compile/CWSYS  i386

>Description:

	When logging into encrypted login (eklogin) service, kerberos
	klogind, approximately 9 times out of 10 the following message
	does NOT display:

	This rlogin session is using DES encryption for all data transmissions.

	Even though the message is NOT displayed 9 times out of 10,
	I have been able to verify, via tcpdump, that packets are
	still encrypted.  Just the message is not displayed 9/10 times.

>How-To-Repeat:

	Log into an eklogin service using:
		krlogin -x servername

	The DES encryption message is not displayed 9/10 or more
	times.

>Fix:
	
	Remove patch-al and rebuild krb5-1.0.5.

>Release-Note:
>Audit-Trail:

From: Jacques Vidrine <n@nectar.com>
To: freebsd-gnats-submit@freebsd.org, cschuber@uumail.gov.bc.ca,
        dima@freebsd.org
Cc:  Subject: Re: ports/8609: eklogin service (kerberos klogind) fails to print DES 
 msg
Date: Fri, 13 Nov 1998 15:49:13 -0600

 The same behavior is seen under -CURRENT.
 
 The patch in question defines HAVE_OPENPTY.  This causes
 the Kerberos utility library to use openpty rather than
 the code built into Kerberos (pty_getpty) for allocating 
 a master pty.
 
 I've determined that the difference that tickles this bug
 between the openpty code and the pty_getpty code is that
 openpty opens the slave as well as the master, while pty_getpty
 just opens the master.  
 
 I was able to recreate the bug by undefining HAVE_OPENPTY (so
 that the built-in pty_getpty code would be used), but adding
 a gratuitous open/close of the slave pty in krlogind.c. i.e.
 something like:
    
    if ((retval = pty_getpty(&p,line, sizeof(line)))) { 
         com_err(progname, retval, "while getting master pty");
         exit(2);  
    } 
 +  {
 +	int dummy = open(line, O_RDWR, 0);
 +       if (dummy)
 +		close(dummy);
 +  }
 
 So I am theorizing that some state change caused by the open
 and/or close of the tty is occurring that is tickling some
 bug.  Unfortunately, I'm not familiar enough with the terminal
 drivers to understand what.
 
 -- 
 Jacques Vidrine / n@nectar.com / nectar@FreeBSD.org
State-Changed-From-To: open->analyzed 
State-Changed-By: nectar 
State-Changed-When: Fri Nov 13 13:52:41 PST 1998 
State-Changed-Why:  
A preliminary evaluation of the problem is available. 


Responsible-Changed-From-To: freebsd-ports->nectar 
Responsible-Changed-By: nectar 
Responsible-Changed-When: Fri Nov 13 13:52:41 PST 1998 
Responsible-Changed-Why:  
krb5 is my port. 
State-Changed-From-To: analyzed->closed 
State-Changed-By: nectar 
State-Changed-When: Fri Jul 20 06:15:50 PDT 2001 
State-Changed-Why:  
The originally reported bug has long been fixed. 

http://www.FreeBSD.org/cgi/query-pr.cgi?pr=8609 
>Unformatted:
