[28305] in Kerberos
Re: [modauthkerb] Saving credential with KrbSaveCredentials
daemon@ATHENA.MIT.EDU (Henry B. Hotz)
Tue Aug 28 19:49:58 2007
In-Reply-To: <1188294704.2987.5.camel@tux.lib.cbs.dk>
Mime-Version: 1.0 (Apple Message framework v752.3)
Message-Id: <86B5BCE5-63D1-4CAD-BAB8-BA04606AC379@jpl.nasa.gov>
From: "Henry B. Hotz" <hotz@jpl.nasa.gov>
Date: Tue, 28 Aug 2007 16:48:35 -0700
To: mikkel@linet.dk
Cc: Achim Grolms <achim@grolmsnet.de>, kerberos <kerberos@mit.edu>,
modauthkerb-help <modauthkerb-help@lists.sourceforge.net>,
Rob Crittenden <rcritten@redhat.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Aug 28, 2007, at 2:51 AM, Mikkel Kruse Johnsen wrote:
> Hi Rob
>
> The latest patch was a big mess and the way I made mod_auth_kerb
> use it's internal SPNEGO was not good. An options in configure
> should properbly be made (--enable-internal-spnego).
>
> But since the problem is not really with mod_auth_kerb but with MIT
> kerberos, I was hoping that someone on the kerberos list had
> responded.
>
> I am planing on filing a bug report on RHEL5 (it works on RHEL4
> where it uses the internal SPNEGO). But have not done it yet.
>
> But feel free to send the patch upstream (I don't know what that
> involves).
If "upstream" means MIT, then you send it to krb5-bugs@mit.edu.
Should include the output of "krb5-config --version" as a minimum. I
suspect they have already fixed the bug, so the issue would be RedHat
not keeping up with MIT.
> /Mikkel
>
> On Mon, 2007-08-27 at 11:55 -0400, Rob Crittenden wrote:
>> Mikkel Kruse Johnsen wrote:
>> > Hi All
>> >
>> > I got it to work. It seems there is an error in the SPNEGO code
>> on MIT
>> > Kerberos. When compiling mod_auth_kerb to use it's internal
>> SPNEGO code
>> > everything works fine.
>> >
>>
>> This patch works for me as well. I simplified it significantly to
>> just using the internal SPNEGO library, including the #ifndef
>> GSSAPI_SUPPORTS_SPNEGO around cmp_gss_type() and including the
>> acc_ret_flags option.
>>
>> Are you planning to submit this upstream?
>>
>> And finally, thanks for continuing to work on this until you
>> figured it out!
>>
>> regards rob
>> !DSPAM:46d2f40a216093430311512!
> Mikkel Kruse Johnsen
> Adm.Dir.
>
> Linet
------------------------------------------------------------------------
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
