From bounce-debian-bugs-dist==chris-lamb.co.uk@lists.debian.org Sun Apr 20 10:55:37 2008
Received: from liszt.debian.org ([82.195.75.100])
	by chris-lamb.co.uk with esmtps (TLS-1.0:DHE_RSA_AES_256_CBC_SHA1:32)
	(Exim 4.63)
	(envelope-from <bounce-debian-bugs-dist==chris-lamb.co.uk@lists.debian.org>)
	id 1JnWGf-00067y-PO
	for bot.address@chris-lamb.co.uk; Sun, 20 Apr 2008 10:55:37 +0100
Received: from localhost (localhost [127.0.0.1])
	by liszt.debian.org (Postfix) with QMQP
	id 7039F13A4EE7; Sun, 20 Apr 2008 09:55:28 +0000 (UTC)
Old-Return-Path: <debbugs@rietz.debian.org>
X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on liszt.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-7.9 required=4.0 tests=BAYES_00,FOURLA,LDO_WHITELIST,
	RCVD_IN_DNSWL_LOW autolearn=ham version=3.2.3
X-Original-To: debian-bugs-dist@lists.debian.org
Delivered-To: lists-debian-bugs-dist@liszt.debian.org
Received: from rietz.debian.org (rietz.debian.org [140.211.166.43])
	by liszt.debian.org (Postfix) with ESMTP id B397413A4EAB;
	Sun, 20 Apr 2008 09:55:13 +0000 (UTC)
Received: from debbugs by rietz.debian.org with local (Exim 4.63)
	(envelope-from <debbugs@rietz.debian.org>)
	id 1JnWCa-0006Fg-WC; Sun, 20 Apr 2008 09:51:17 +0000
X-Loop: owner@bugs.debian.org
Subject: Bug#476940: python-kerberos - fails to do preauth
Reply-To: Bastian Blank <waldi@debian.org>, 476940@bugs.debian.org
Resent-From: Bastian Blank <waldi@debian.org>
Resent-To: debian-bugs-dist@lists.debian.org
Resent-CC: Guido Guenther <agx@sigxcpu.org>
Resent-Date: Sun, 20 Apr 2008 09:51:05 +0000
Resent-Message-ID: <handler.476940.B.120868485417354@bugs.debian.org>
X-Debian-PR-Message: report 476940
X-Debian-PR-Package: python-kerberos
X-Debian-PR-Keywords: 
X-Debian-PR-Source: pykerberos
Received: via spool by submit@bugs.debian.org id=B.120868485417354
          (code B ref -1); Sun, 20 Apr 2008 09:51:05 +0000
Received: (at submit) by bugs.debian.org; 20 Apr 2008 09:47:34 +0000
X-Amavis-Spam-Status: No, score=-11.9 required=4.0 tests=BAYES_00,FOURLA,
	FROMDEVELOPER,HAS_PACKAGE autolearn=no 
	version=3.1.4-bugs.debian.org_2005_01_02
Received: from wavehammer.waldi.eu.org ([82.139.201.20])
	by rietz.debian.org with esmtp (Exim 4.63)
	(envelope-from <waldi@debian.org>)
	id 1JnW8z-0004S0-SM
	for submit@bugs.debian.org; Sun, 20 Apr 2008 09:47:34 +0000
Received: by wavehammer.waldi.eu.org (Postfix, from userid 1000)
	id 4858854109; Sun, 20 Apr 2008 11:47:31 +0200 (CEST)
Date: Sun, 20 Apr 2008 11:47:31 +0200
From: Bastian Blank <waldi@debian.org>
To: submit@bugs.debian.org
Message-ID: <20080420094731.GA26273@wavehammer.waldi.eu.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
User-Agent: Mutt/1.5.13 (2006-08-11)
Delivered-To: submit@bugs.debian.org
Resent-Date: Sun, 20 Apr 2008 09:51:16 +0000
X-Debian-Message: from BTS
X-Rc-Virus: 2007-09-13_01
X-Rc-Spam: 2007-10-04_01
X-Mailing-List: <debian-bugs-dist@lists.debian.org> archive/latest/343399
X-Loop: debian-bugs-dist@lists.debian.org
List-Id: <debian-bugs-dist.lists.debian.org>
List-Post: <mailto:debian-bugs-dist@lists.debian.org>
List-Help: <mailto:debian-bugs-dist-request@lists.debian.org?subject=help>
List-Subscribe: <mailto:debian-bugs-dist-request@lists.debian.org?subject=subscribe>
List-Unsubscribe: <mailto:debian-bugs-dist-request@lists.debian.org?subject=unsubscribe>
Precedence: list
Resent-Sender: debian-bugs-dist-request@lists.debian.org
Received-SPF: none
X-SPF-Guess: pass
X-Spam-Score: -38.1
X-Spam-Report: (-38.1 points, 5.0 required)
	pts rule name              description
	---- ---------------------- --------------------------------------------------
	-50 D_FOR_BOT              For debian-devel-changes bot
	0.0 UNPARSEABLE_RELAY      Informational: message has unparseable relay lines
	-2.6 BAYES_00               BODY: Bayesian spam probability is 0 to 1%
	[score: 0.0000]
	14 AWL                    AWL: From: address is in the auto white-list

Package: python-kerberos
Version: 1.0-1
Severity: important

kerberos.checkPassword fails to do preauth. Instead of using the kdc
configured in the config, it tries to find _kerberos-master._udp.$REALM
via DNS:

| 192.168.202.17 -> 192.168.202.9 DNS Standard query AAAA u-stud-dc01.student.uni-tuebingen.de
| 192.168.202.9 -> 192.168.202.17 DNS Standard query response
| 192.168.202.17 -> 192.168.202.9 DNS Standard query AAAA u-stud-dc01.student.uni-tuebingen.de.waldi.eu.org
| 192.168.202.9 -> 192.168.202.17 DNS Standard query response, No such name
| 192.168.202.17 -> 192.168.202.9 DNS Standard query A u-stud-dc01.student.uni-tuebingen.de
| 192.168.202.9 -> 192.168.202.17 DNS Standard query response A 134.2.3.194
| 192.168.202.17 -> 192.168.202.9 DNS Standard query A u-stud-dc01.student.uni-tuebingen.de
| 192.168.202.9 -> 192.168.202.17 DNS Standard query response A 134.2.3.194
| 192.168.202.17 -> 192.168.202.9 DNS Standard query AAAA u-stud-dc02.student.uni-tuebingen.de
| 192.168.202.9 -> 192.168.202.17 DNS Standard query response
| 192.168.202.17 -> 192.168.202.9 DNS Standard query AAAA u-stud-dc02.student.uni-tuebingen.de.waldi.eu.org
| 192.168.202.9 -> 192.168.202.17 DNS Standard query response, No such name
| 192.168.202.17 -> 192.168.202.9 DNS Standard query A u-stud-dc02.student.uni-tuebingen.de
| 192.168.202.9 -> 192.168.202.17 DNS Standard query response A 134.2.3.195
| 192.168.202.17 -> 192.168.202.9 DNS Standard query A u-stud-dc02.student.uni-tuebingen.de
| 192.168.202.9 -> 192.168.202.17 DNS Standard query response A 134.2.3.195
| 192.168.202.17 -> 192.168.202.9 DNS Standard query AAAA u-stud-dc01.student.uni-tuebingen.de
| 192.168.202.9 -> 192.168.202.17 DNS Standard query response
| 192.168.202.17 -> 192.168.202.9 DNS Standard query AAAA u-stud-dc01.student.uni-tuebingen.de.waldi.eu.org
| 192.168.202.9 -> 192.168.202.17 DNS Standard query response, No such name
| 192.168.202.17 -> 192.168.202.9 DNS Standard query A u-stud-dc01.student.uni-tuebingen.de
| 192.168.202.9 -> 192.168.202.17 DNS Standard query response A 134.2.3.194
| 192.168.202.17 -> 192.168.202.9 DNS Standard query AAAA u-stud-dc02.student.uni-tuebingen.de
| 192.168.202.9 -> 192.168.202.17 DNS Standard query response
| 192.168.202.17 -> 192.168.202.9 DNS Standard query AAAA u-stud-dc02.student.uni-tuebingen.de.waldi.eu.org
| 192.168.202.9 -> 192.168.202.17 DNS Standard query response, No such name
| 192.168.202.17 -> 192.168.202.9 DNS Standard query A u-stud-dc02.student.uni-tuebingen.de
| 192.168.202.9 -> 192.168.202.17 DNS Standard query response A 134.2.3.195
| 192.168.202.17 -> 134.2.3.194  KRB5 AS-REQ
|  134.2.3.194 -> 192.168.202.17 KRB5 KRB Error: KRB5KDC_ERR_PREAUTH_REQUIRED
| 192.168.202.17 -> 192.168.202.9 DNS Standard query SRV _kerberos-master._udp.STUDENT.UNI-TUEBINGEN.DE

kinit (from heimdal) does the following:

| 192.168.202.17 -> 192.168.202.9 DNS Standard query AAAA u-stud-dc01.student.uni-tuebingen.de
| 192.168.202.9 -> 192.168.202.17 DNS Standard query response
| 192.168.202.17 -> 192.168.202.9 DNS Standard query AAAA u-stud-dc01.student.uni-tuebingen.de.waldi.eu.org
| 192.168.202.9 -> 192.168.202.17 DNS Standard query response, No such name
| 192.168.202.17 -> 192.168.202.9 DNS Standard query A u-stud-dc01.student.uni-tuebingen.de
| 192.168.202.9 -> 192.168.202.17 DNS Standard query response A 134.2.3.194
| 192.168.202.17 -> 134.2.3.194  KRB5 AS-REQ
|  134.2.3.194 -> 192.168.202.17 KRB5 KRB Error: KRB5KDC_ERR_PREAUTH_REQUIRED
| 192.168.202.17 -> 192.168.202.9 DNS Standard query AAAA u-stud-dc01.student.uni-tuebingen.de
| 192.168.202.9 -> 192.168.202.17 DNS Standard query response
| 192.168.202.17 -> 192.168.202.9 DNS Standard query AAAA u-stud-dc01.student.uni-tuebingen.de.waldi.eu.org
| 192.168.202.9 -> 192.168.202.17 DNS Standard query response, No such name
| 192.168.202.17 -> 192.168.202.9 DNS Standard query A u-stud-dc01.student.uni-tuebingen.de
| 192.168.202.9 -> 192.168.202.17 DNS Standard query response A 134.2.3.194
| 192.168.202.17 -> 134.2.3.194  KRB5 AS-REQ
|  134.2.3.194 -> 192.168.202.17 KRB5 KRB Error: KRB5KDC_ERR_PREAUTH_FAILED

Bastian

-- 
Punishment becomes ineffective after a certain point.  Men become insensitive.
		-- Eneg, "Patterns of Force", stardate 2534.7



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org


