Skip Menu |
 

Subject: gss_acquire_cred should search for the desired client principal if possible
When passed GSS_C_INITIATE and a non-NULL desired name, gss_acquire_cred should
search the available credentials caches rather than simply failing if tickets for the
desired client principal are not in the default ccache.

Note: targeted for 1.4.3 so KfM and KfW can ship it sooner than 1.5. Patches to fix
this bug will not affect Unix platforms because currently they only have one file-based
ccache at a time.
From: lxs@mit.edu
Subject: CVS Commit
When passed GSS_C_INITIATE and a non-NULL desired name, gss_acquire_cred
should search the available credentials caches rather than simply failing
if tickets for the desired client principal are not in the default ccache.

(this is the KfM-specific portion of the patch -- still need KfW portion)

Commit By: lxs



Revision: 17466
Changed Files:
U trunk/src/lib/gssapi/krb5/acquire_cred.c
Jeff, can you add the KfW specific portion of this patch and then mark it for pullup? Thanks.
From: jaltman@mit.edu
Subject: CVS Commit
* acquire_cred.c (acquire_init_cred):
If a specific principal has been requested, attempt to acquire
tickets and set the ccache name in the context to the ccache
containing the tickets if obtained. (KFM/KFW)

* ccdefault.c:
(krb5int_cc_default) - add KFW support for multiple ccaches


Commit By: jaltman



Revision: 17468
Changed Files:
U trunk/src/lib/gssapi/krb5/ChangeLog
U trunk/src/lib/gssapi/krb5/acquire_cred.c
U trunk/src/lib/krb5/ccache/ChangeLog
U trunk/src/lib/krb5/ccache/ccdefault.c
From: tlyu@mit.edu
Subject: CVS Commit
pull up r17466 and r17468 from trunk

Commit By: tlyu



Revision: 17471
Changed Files:
U branches/krb5-1-4/src/lib/gssapi/krb5/ChangeLog
U branches/krb5-1-4/src/lib/gssapi/krb5/acquire_cred.c
U branches/krb5-1-4/src/lib/krb5/ccache/ChangeLog
U branches/krb5-1-4/src/lib/krb5/ccache/ccdefault.c
U branches/krb5-1-4/src/patchlevel.h