[28300] in Kerberos
Re: [modauthkerb] Saving credential with KrbSaveCredentials
daemon@ATHENA.MIT.EDU (Mikkel Kruse Johnsen)
Tue Aug 28 06:19:28 2007
From: Mikkel Kruse Johnsen <mikkel@linet.dk>
To: Rob Crittenden <rcritten@redhat.com>
In-Reply-To: <46D2F3F3.800@redhat.com>
Date: Tue, 28 Aug 2007 11:51:44 +0200
Message-Id: <1188294704.2987.5.camel@tux.lib.cbs.dk>
Mime-Version: 1.0
Cc: achim@grolmsnet.de, modauthkerb-help@lists.sourceforge.net,
kerberos <kerberos@mit.edu>
Reply-To: mikkel@linet.dk
Content-Type: text/plain; charset="utf-8"
Errors-To: kerberos-bounces@mit.edu
Content-Transfer-Encoding: 8bit
Hi Rob
The latest patch was a big mess and the way I made mod_auth_kerb useit's internal SPNEGO was not good. An options in configure shouldproperbly be made (--enable-internal-spnego).
But since the problem is not really with mod_auth_kerb but with MITkerberos, I was hoping that someone on the kerberos list had responded.
I am planing on filing a bug report on RHEL5 (it works on RHEL4 where ituses the internal SPNEGO). But have not done it yet.
But feel free to send the patch upstream (I don't know what thatinvolves).
/Mikkel
On Mon, 2007-08-27 at 11:55 -0400, Rob Crittenden wrote:
> Mikkel Kruse Johnsen wrote:> > Hi All> > > > I got it to work. It seems there is an error in the SPNEGO code on MIT > > Kerberos. When compiling mod_auth_kerb to use it's internal SPNEGO code > > everything works fine.> > > > This patch works for me as well. I simplified it significantly to just > using the internal SPNEGO library, including the #ifndef > GSSAPI_SUPPORTS_SPNEGO around cmp_gss_type() and including the > acc_ret_flags option.> > Are you planning to submit this upstream?> > And finally, thanks for continuing to work on this until you figured it out!> > regards> > rob> !DSPAM:46d2f40a216093430311512!
Mikkel KruseJohnsenAdm.Dir.
LinetØrholmgade 6 st tvCopenhagen N 2200Denmark
Work: +45 21287793Mobile: +4521287793Email:mikkel@linet.dkIM:mikkel@linet.dk(MSN) ProfessionalProfileHealthcare
NetworkConsultant ________________________________________________Kerberos mailing list Kerberos@mit.eduhttps://mailman.mit.edu/mailman/listinfo/kerberos