[28308] in Kerberos
Re: [modauthkerb] Saving credential with KrbSaveCredentials
daemon@ATHENA.MIT.EDU (Rob Crittenden)
Wed Aug 29 15:27:44 2007
Message-ID: <46D56EE4.5010403@redhat.com>
Date: Wed, 29 Aug 2007 09:04:36 -0400
From: Rob Crittenden <rcritten@redhat.com>
MIME-Version: 1.0
To: "Henry B. Hotz" <hotz@jpl.nasa.gov>
In-Reply-To: <86B5BCE5-63D1-4CAD-BAB8-BA04606AC379@jpl.nasa.gov>
Cc: Achim Grolms <achim@grolmsnet.de>,
modauthkerb-help <modauthkerb-help@lists.sourceforge.net>,
kerberos <kerberos@mit.edu>
Content-Type: multipart/mixed; boundary="===============1874264405=="
Errors-To: kerberos-bounces@mit.edu
This is a cryptographically signed message in MIME format.
--===============1874264405==
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature";
micalg=sha1; boundary="------------ms070204050806060604000509"
This is a cryptographically signed message in MIME format.
--------------ms070204050806060604000509
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Henry B. Hotz wrote:
>
> On Aug 28, 2007, at 2:51 AM, Mikkel Kruse Johnsen wrote:
>
>> Hi Rob
>>
>> The latest patch was a big mess and the way I made mod_auth_kerb use
>> it's internal SPNEGO was not good. An options in configure should
>> properbly be made (--enable-internal-spnego).
>>
>> But since the problem is not really with mod_auth_kerb but with MIT
>> kerberos, I was hoping that someone on the kerberos list had responded.
>>
>> I am planing on filing a bug report on RHEL5 (it works on RHEL4 where
>> it uses the internal SPNEGO). But have not done it yet.
>>
>> But feel free to send the patch upstream (I don't know what that
>> involves).
>
> If "upstream" means MIT, then you send it to krb5-bugs@mit.edu. Should
> include the output of "krb5-config --version" as a minimum. I suspect
> they have already fixed the bug, so the issue would be RedHat not
> keeping up with MIT.
I was thinking more the mod_auth_kerb maintainer. The debugging output
that this adds is significantly more useful than currently exists, IMHO.
rob
--------------ms070204050806060604000509
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature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--------------ms070204050806060604000509--
--===============1874264405==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
--===============1874264405==--