Do you have kstart, nslcd, or msktutil working with FreeBSD 14.0?

Hello,

We've been unable to get kstart, nslcd, or msktutil working with FreeBSD 14.0. They abort, error out, and/dump.

For now, we have stalled 14.0 deployment plans until we can resolve this. We suspect it is an openssl issue.

We first posted back in early December: https://forums.freebsd.org/threads/ldap-issues-on-freebsd-14-0.91345/  Posting here to widen the audience in case others have found something similar.

Here is kstart not cooperating.

root@walnuts-dev:/tmp # lldb --core 0.k5start.98404.core /usr/local/bin/k5start
(lldb) target create "/usr/local/bin/k5start" --core "0.k5start.98404.core"
Core file '/tmp/0.k5start.98404.core' (x86_64) was loaded.
(lldb) bt
* thread #1, name = 'k5start', stop reason = signal SIGSEGV
  * frame #0: 0x0000000825446c7f libcrypto.so.30`EVP_Cipher(ctx=0x00000a6d97eb4d80, out="\xba\U00000004\x82Q\x96\x99{\xd00\U0000001a\xa0\U00000011\U00000018\U0000000f20231214010802Z\xa1\U00000005\U00000002\U00000003\f[X\xb6:ǖ\xff\xff\xff\U0000001f", in="\xba\U00000004\x82Q\x96\x99{\xd00\U0000001a\xa0\U00000011\U00000018\U0000000f20231214010802Z\xa1\U00000005\U00000002\U00000003\f[X\xb6:ǖ\xff\xff\xff\U0000001f", inl=36) at evp_lib.c:406:27
    frame #1: 0x00000008236be4b6 libkrb5.so.11`ARCFOUR_encrypt [inlined] ARCFOUR_subencrypt(context=0x00000a6d97e1b000, key=<unavailable>, data=0x00000a6d97ed14c0, len=<unavailable>, usage=<unavailable>, ivec=<unavailable>) at crypto-arcfour.c:184:5
    frame #2: 0x00000008236be352 libkrb5.so.11`ARCFOUR_encrypt(context=0x00000a6d97e1b000, key=<unavailable>, data=0x00000a6d97ed14c0, len=<unavailable>, encryptp=<unavailable>, usage=<unavailable>, ivec=<unavailable>) at crypto-arcfour.c:311:9
    frame #3: 0x00000008236c2ac8 libkrb5.so.11`krb5_encrypt_ivec [inlined] encrypt_internal_special(context=0x00000a6d97e1b000, crypto=0x00000a6d97e2d8f0, usage=1, data=0x00000a6d97ecf920, len=28, result=0x0000000820f32d08, ivec=<unavailable>) at crypto.c:969:11
    frame #4: 0x00000008236c2a39 libkrb5.so.11`krb5_encrypt_ivec(context=0x00000a6d97e1b000, crypto=0x00000a6d97e2d8f0, usage=1, data=0x00000a6d97ecf920, len=28, result=0x0000000820f32d08, ivec=0x0000000000000000) at crypto.c:1761:9
    frame #5: 0x00000008236c2e65 libkrb5.so.11`krb5_encrypt_EncryptedData [inlined] krb5_encrypt(context=<unavailable>, crypto=0x00000a6d97e2d8f0, usage=<unavailable>, data=<unavailable>, len=<unavailable>, result=0x0000000820f32d08) at crypto.c:1775:12
    frame #6: 0x00000008236c2e52 libkrb5.so.11`krb5_encrypt_EncryptedData(context=0x00000a6d97e1b000, crypto=0x00000a6d97e2d8f0, usage=1, data=0x00000a6d97ecf920, len=<unavailable>, kvno=0, result=0x0000000820f32cf8) at crypto.c:1793:12
    frame #7: 0x00000008236d32c5 libkrb5.so.11`add_enc_ts_padata [inlined] make_pa_enc_timestamp(context=0x00000a6d97e1b000, md=0x00000a6d97ed5000, etype=<unavailable>, key=0x00000a6d97ecfa00) at init_creds_pw.c:954:11
    frame #8: 0x00000008236d3211 libkrb5.so.11`add_enc_ts_padata(context=0x00000a6d97e1b000, md=0x00000a6d97ed5000, client=<unavailable>, keyproc=(libkrb5.so.11`keytab_key_proc at init_creds_pw.c:1479), keyseed=0x00000a6d97e20180, enctypes=0x00000a6d97e2d8c0, netypes=1, salt=0x00000a6d97e2d8c8, s2kparams=0x0000000000000000) at init_creds_pw.c:1018:8
    frame #9: 0x00000008236d15da libkrb5.so.11`krb5_init_creds_step [inlined] pa_data_to_md_ts_enc(context=0x00000a6d97e1b000, a=0x00000a6d97e5a0d0, client=<unavailable>, ctx=0x00000a6d97e5a000, ppaid=0x00000a6d97e2d8c0, md=0x00000a6d97ed5000) at init_creds_pw.c:1040:2
    frame #10: 0x00000008236d15a6 libkrb5.so.11`krb5_init_creds_step at init_creds_pw.c:1224:2
    frame #11: 0x00000008236d156d libkrb5.so.11`krb5_init_creds_step(context=0x00000a6d97e1b000, ctx=0x00000a6d97e5a000, in=0x0000000820f33028, out=0x0000000820f33018, hostinfo=0x0000000000000000, flags=0x0000000820f33014) at init_creds_pw.c:1816:11
    frame #12: 0x00000008236d1caf libkrb5.so.11`krb5_init_creds_get(context=0x00000a6d97e1b000, ctx=0x00000a6d97e5a000) at init_creds_pw.c:1928:8
    frame #13: 0x00000008236d29de libkrb5.so.11`krb5_get_init_creds_keytab(context=0x00000a6d97e1b000, creds=0x0000000820f33100, client=<unavailable>, keytab=0x00000a6d97e2f000, start_time=<unavailable>, in_tkt_service="krbtgt/ABC.EXAMPLE.COM@ABC.EXAMPLE.COM", options=0x00000a6d97e10440) at init_creds_pw.c:2136:11
    frame #14: 0x00000000002068f2 k5start`___lldb_unnamed_symbol208 + 690
    frame #15: 0x00000000002053e6 k5start`___lldb_unnamed_symbol202 + 182
    frame #16: 0x0000000000206609 k5start`___lldb_unnamed_symbol207 + 2617
    frame #17: 0x00000008287f7afa libc.so.7`__libc_start1(argc=11, argv=0x0000000820f338c0, env=0x0000000820f33920, cleanup=<unavailable>, mainX=(k5start`___lldb_unnamed_symbol207)) at libc_start1.c:157:7
    frame #18: 0x0000000000205240 k5start`___lldb_unnamed_symbol198 + 48

-- 
  Dan Langille
  dan@langille.org