openssh unix dev - Mar 2003 - [Bug 508] Krb4/AFS token passing doesn't work because of mkstemp

http://bugzilla.mindrot.org/show_bug.cgi?id=508

           Summary: Krb4/AFS token passing doesn't work because of mkstemp
           Product: Portable OpenSSH
           Version: -current
          Platform: All
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: sshd
        AssignedTo: openssh-unix-dev at mindrot.org
        ReportedBy: ksulliva at psc.edu


In auth-krb4.c, in krb4_init(), we have:
        if ((fd = mkstemp(authctxt->krb4_ticket_file)) != -1) {

which tries to create a temporary file to hold kerberos tickets.  This file is
created some lines above by:
        snprintf(authctxt->krb4_ticket_file, MAXPATHLEN,
"%s%u_%ld",
So, mkstemp() is passes something like "/tmp/tkt9036_6294", with no Xs
at the end.

On a RedHat 8.0, mkstemp() will fail if the file template does not end with at
least 6 Xs.

To fix this, replace the mkstemp line with:

if ((fd = open(authctxt->krb4_ticket_file, O_RDWR|O_CREAT|O_EXCL, 0x600)) !=
-1) {



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=508

djm at mindrot.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |DUPLICATE



------- Additional Comments From djm at mindrot.org  2003-03-13 09:43 -------
Please search existing bug reports before submitting new bugs

*** This bug has been marked as a duplicate of 44 ***



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.