Created attachment 7135 [details]
The kerberos service ticket gets duplicated several time on each client connection. Each Samba client utility which uses kerberos duplicated the service ticket each time it establishes a connection.
The attached patch fixes the problem. I've tested it with kerberos 1.6.3 and versions up to 1.9.1.
The patch is needed in master, 3.6 and 3.5.
Have you also done tests with Heimdal versions as well as with memory credential caches ? Do they all behave the same then ?
Tested with heimdal too and the patch fixes the problem on heimdal too.
Unless I am reading it wrong, and it is entirely possible, this fix looks wrong.
It looks to me that you are just avoiding saving the obtained tickets and keep fetching tickets every time a connection is established.
The proper fix is to check if you already have a valid ticket and reuse that instead of fetching new ones every time.
Please disregard my comment, I should have followed my instinct that was telling me not enough coffee was circulating in the bloodstream yet :)
Karolin, please add to 3.6 and 3.5.
and master. Thanks :)
Pushed to v3-5-test and v3-6-test (was already pushed to master).
Closing out bug report.