touch-packages team mailing list archive

[Patrik Lundin <patrik.lundin@xxxxx>]

Thanks for the pointer Brian, see SRU format below:

[Impact]

* Effects of the bug on users
The kdc process leaks memory which means the users will need to restart the service when enough time has passed.

* Justification for backporting the fix to the stable release
The kdc is a long lived process, which means this leak will eventually be hit by anyone. I would not regard the current package as "stable".

* Explanation of how the upload fixes this bug 
https://github.com/heimdal/heimdal/issues/93

[Test Case]

* Install heimdal-kdc package

* Modify /etc/krb5.conf so you use the same machine for AS-REQ:
---
[realms]
        YOUR.REALM = { 
                kdc = your-local-machine.tld
        }   
---

* Add a user with name "test" and password "test"
---
# kadmin -l --use-defaults test
test@YOUR.REALM's Password: 
Verify password - test@YOUR.REALM's Password:
#
---

* Note how much RAM is currently being used by the kdc process:
---
# ps auxww | grep kdc | grep -v grep
root       832  0.0  0.1  79948  2768 ?        S    09:22   0:00 /usr/lib/heimdal-servers/kdc --config-file=/etc/heimdal-kdc/kdc.conf
---

* Perform a bunch of requests against it: 
---
# for request in {1..20000}; do echo test | kinit --password-file=STDIN test@YOUR.REALM; done
---

* Note how much RAM is used after the test has been completed:
# ps auxww | grep kdc | grep -v grep
root       832  2.1  0.4  85660  9104 ?        S    09:22   0:27 /usr/lib/heimdal-servers/kdc --config-file=/etc/heimdal-kdc/kdc.conf
---

* Install the new packages

* Reboot the machine

* Get a fresh RAM measurement:
---
# ps auxww | grep kdc | grep -v grep
root       864  0.0  0.1  79948  2764 ?        S    11:01   0:00 /usr/lib/heimdal-servers/kdc --config-file=/etc/heimdal-kdc/kdc.conf
---

* Run test again
---
# for request in {1..20000}; do echo test | kinit --password-file=STDIN test@YOUR.REALM; done
---

* Note that much less memory is used now:
---
# ps auxww | grep kdc | grep -v grep
root       864  1.8  0.1  79948  3468 ?        S    11:01   0:27 /usr/lib/heimdal-servers/kdc --config-file=/etc/heimdal-kdc/kdc.conf
---

-- 
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to heimdal in Ubuntu.
https://bugs.launchpad.net/bugs/1422359

Title:
  heimdal-kdc: kdc process leaks memory

Status in heimdal package in Ubuntu:
  Fix Released
Status in heimdal source package in Trusty:
  New
Status in heimdal source package in Utopic:
  New
Status in heimdal package in Debian:
  Fix Released

Bug description:
  I have a KDC running Trusty Tahr. The machine has been up for 74 days
  and the kdc process has allocated almost all of the 8GB RAM available
  to the machine.

  When asking about this on heimdal-discuss, GALAMBOS Daniel pointed me to a relevant bug report (and fix) for Debian:
  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=746486

  It seems likely this is the same problem I am experiencing.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/heimdal/+bug/1422359/+subscriptions