Date: Tue, 07 Mar 2006 19:56:37 -0800
From: Valerie Peng <Yu-Ching.Peng@Sun.COM>
Subject: Cannot acquire initiator cred using gss_acquire_cred with explicit name on Windows
To: krb5-bugs@mit.edu
Message-Id: <440E55F5.3030601@sun.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7BIT
User-Agent: Mozilla Thunderbird 1.0.6 (Windows/20050716)
Cc: jaltman@gmail.com
Precedence: list
Sender: krb5-bugs-incoming-bounces@PCH.mit.edu
Errors-To: krb5-bugs-incoming-bounces@PCH.mit.edu
Content-Length: 1239

I downloaded kfw-3.0.0-final and unzipp'ed it under my personal 
directory.

I have an app which will load the gssapi32.dll and dynamically 
invoke various gss functions. So far things work fine except 
this one problem with gss_acquire_cred that looks like a bug 
in the MIT kerberos impl.

Here is what I tried:
=========================
major = gssIndicateMechs(&minor, &desired_mechs);
// gss_acquire_cred call#1
major = gssAcquireCred(&minor, GSS_C_NO_NAME, GSS_C_INDEFINITE,
desired_mechs, GSS_C_INITIATE, &credHdl, NULL, NULL);

major = gssInquireCred(&minor, credHdl, &nameHdl, NULL, NULL, NULL);
// gss_acquire_cred call#2
major = gssAcquireCred(&minor, nameHdl, GSS_C_INDEFINITE,
    desired_mechs, GSS_C_INITIATE, &credHdl, NULL, NULL);
...
major = gssImportName(&minor, &nameVal, nameType, &nameHdl);
// gss_acquire_cred call#3
major = gssAcquireCred(&minor, nameHdl, 0, desired_mechs,
	GSS_C_ACCEPT, &credHdl2, NULL, NULL);
=========================

#1 and #3 of the above gss_acquire_cred(...) calls succeed 
while #2 hangs.

I checked the major/minor status after each gss calls and did
not observe any problem up until call#2. If I commented out #2,
my app will run to its completion.

Please fix this...
Thanks,
Valerie