Kerberos 5 @1.7.2: klist -s segfaults if there's an expired ticket

[newsreply@…]

It was ​suggested in the mailing list that I file a ticket on this issue. Here's the details:

I'm working on Mac OS 10.7.5 Lion. with

$ port info kerberos5
kerberos5 @1.7.2 (net, security)

I know Lion has it's own Kerberos, incompatible with the port but I'm working with a class library that links against Kerb and the developer says we have to have the port.

I have a script that tests for a valid kerberos ticket by running klist -s

It works find if I have a valid ticket or no ticket but if the ticket is expired I get:

$ /opt/local/bin/klist -s
Segmentation fault: 11

It looks like this segfault was fixed in krb5-1.10.

See the latest ​MIT Kerberos changelog, and ​Kerberos ticket #6915.

[pixilla (Bradley Giesbrecht)]

Ticket #36781 may be of interest.

[newsreply@…]

Thanks pixilla, I did see that when I searched for this problem.

I would personally be ecstatic if we didn't need two versions of Kerberos on Lion and Mtn Lion with all the possible user confusion.

It seems a much simple problem to upgrade the one macports installs to fix know bugs.

Either solution would be helpful for us.

Joe