>Number:         15197
>Category:       bin
>Synopsis:       passwd does bad things (with Kerberos and NIS enabled)
>Confidential:   no
>Severity:       serious
>Priority:       low
>Responsible:    bin-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Wed Jan 09 16:24:00 PST 2002
>Closed-Date:
>Last-Modified:
>Originator:     Geoff C. Wing
>Release:        NetBSD 1.5ZA (2002/01/08)
>Organization:
Geoff Wing : <gcw@pobox.com>
Rxvt Stuff : <gcw@rxvt.org>
Zsh Stuff  : <gcw@zsh.org>
>Environment:
System: NetBSD c.primenet.com.au 1.5ZA NetBSD 1.5ZA (C) #0: Mon Jan 7 10:00:03 EST 2002 gcw@c.primenet.com.au:/usr/netbsd/src/sys/arch/i386/compile/C i386
Architecture: i386
Machine: i386
>Description:
	with both Kerberos and YP/NIS set up, running passwd as yppasswd
	spews out:
		yppasswd in free(): warning: chunk is already free.
		......
		yppasswd in free(): warning: chunk is already free.
		yppasswd in free(): warning: page is already free.
		yppasswd in free(): warning: page is already free.

	due to krb5_end() being called, even though the init routine wasn't
	called.  See loop after name comparison in usr.bin/passwd/passwd.c:130

>How-To-Repeat:
	enable Kerberos and YP/NIS
	run yppasswd
>Fix:
	Depends on whether it's valid to call end/destructor routines for
	the password method "modules" if the initialisation routine hasn't
	been called.
	If it is valid, then krb5 needs some fixes.
	If not, then usr.bin/passwd need some fixes.
>Release-Note:
>Audit-Trail:
>Unformatted: