Skip Menu |
 

Subject: gss_acquire_cred auto prompt support shouldn't break gss_krb5_ccache_name()
gss_acquire_cred auto prompt support currently breaks gss_krb5_ccache_name(). If someone
has set the ccache name and asks for a particular name, gss_acquire_cred does not look for the
desired name in the ccache first but instead walks the cache collection looking for it.

I believe this is broken on both the KLL and the Leash versions of the code.

Noticed this because it break kadmin when you have tickets in your cache collection for the
principal you are using with kadmin.
From: lxs@mit.edu
Subject: SVN Commit
acquire_cred(): Fixed KLL support to try the default ccache first if
it is set.

Commit By: lxs



Revision: 18340
Changed Files:
U trunk/src/lib/gssapi/krb5/acquire_cred.c
From: lxs@mit.edu
Subject: SVN Commit
acquire_cred(): Realized that my previous patch now basically favors the
ccache over the desired name. Added a KLL function to search for the
desired name, favoring the default ccache.

Commit By: lxs



Revision: 18341
Changed Files:
U trunk/src/lib/gssapi/krb5/acquire_cred.c
From: lxs@mit.edu
Subject: SVN Commit
acquire_cred(), kg_caller_provided_ccache_name(): On further reflection
and testing the correct thing appears to be to have gss_krb5_ccache_name()
stop gss_acquire_cred() from searching for the desired name in the cache
collection. If the caller sets the ccache name then gss_acquire_cred will only
look in that ccache. Added kg_caller_provided_ccache_name() to tell whether
or not the caller has actually set the ccache. This should fix the problem for
both Mac OS X and Windows.

Commit By: lxs



Revision: 18343
Changed Files:
U trunk/src/lib/gssapi/krb5/acquire_cred.c
U trunk/src/lib/gssapi/krb5/gssapiP_krb5.h
U trunk/src/lib/gssapi/krb5/gssapi_krb5.c