[28132] in Kerberos
Re: [modauthkerb] Negotiate on Windows with cross-realm
daemon@ATHENA.MIT.EDU (Achim Grolms)
Fri Jul 27 14:37:04 2007
From: Achim Grolms <kerberosml@grolmsnet.de>
To: "Douglas E. Engert" <deengert@anl.gov>
Date: Fri, 27 Jul 2007 20:36:36 +0200
In-Reply-To: <46AA191D.6020902@anl.gov>
MIME-Version: 1.0
Content-Disposition: inline
Message-Id: <200707272036.38186.kerberosml@grolmsnet.de>
Cc: "Henry B. Hotz" <hotz@jpl.nasa.gov>,
modauthkerb-help@lists.sourceforge.net, kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Friday 27 July 2007 18:11, Douglas E. Engert wrote:
> I stil think you have a client problem, of the client not delegating.
A client not delegating because mutal-auth has not finished it's roundtrips?
The mod_auth_kerb code tries to store the deleg_cred *without* checking
if mutal-auth is in progress or is finished.
But if mutal-auth is in progess 'deleg_cred' is invalid...
Achim
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
