Date: Mon, 13 Mar 2006 15:49:43 -0800
From: Valerie Peng <Yu-Ching.Peng@Sun.COM>
Subject: Re: [krbdev.mit.edu #3502] Cannot acquire initiator cred using gss_acquire_cred with explicit name on Windows
In-Reply-To: <rt-3502-15840.14.3556106527734@krbdev.mit.edu>
To: rt-comment@krbdev.mit.edu
Reply-To: Yu-Ching.Peng@Sun.COM
Message-Id: <44160517.1020303@Sun.COM>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7BIT
User-Agent: Mozilla Thunderbird 1.0.2 (X11/20050322)
References: <rt-3502-15840.14.3556106527734@krbdev.mit.edu>
RT-Send-Cc: 
Content-Length: 1186

I corrected the length of name_val so that it uses strlen(..) which
should not include the trailing null, but the result is the same.

Maybe you could send me the src of your gss_acquire_cred_test
so I can compare and check.

Thanks!
Valerie

Jeffrey Altman via RT wrote:
> Taking your code snippet I re-wrote it in C which I have attached to the
> ticket.  The output of the resulting program is as follows:
> 
> [C:\temp]gss_acquire_cred_test.exe jaltman
> 
> [C:\temp]gss_acquire_cred_test.exe foo
> GSS-API error client's gss_acquire_cred: Miscellaneous failure
> GSS-API error client's gss_acquire_cred: Matching credential not found
> 
> [C:\temp]gss_acquire_cred_test.exe jaltman@ATHENA.MIT.EDU
> 
> [C:\temp]gss_acquire_cred_test.exe jaltman@JPL.NASA.GOV
> 
> [C:\temp]gss_acquire_cred_test.exe jaltman@JPL.NASA.GO
> GSS-API error client's gss_acquire_cred: Miscellaneous failure
> GSS-API error client's gss_acquire_cred: Matching credential not found
> 
> 
> I believe that you have a typo in your code because the length of the
> name_val should not include the trailing NUL.
> 
> I can find no error in the current implementation of the gssapi library.
> 
> Jeffrey Altman