Skip Menu |
 

From: ghudson@mit.edu
Subject: SVN Commit

r24147 (ticket #6746) made libgssrpc ignorant of the remote address of
the kadmin socket, even when it's IPv4. This made old-style GSSAPI
authentication fail because it uses the wrong channel bindings. Fix
this problem by making clnttcp_create() get the remote address from
the socket using getpeername() if the caller doesn't provide it and
it's an IPv4 address.

https://github.com/krb5/krb5/commit/df939cf166c1dd11d43b4b05a97651fa4fcf296e
Commit By: ghudson
Revision: 24967
Changed Files:
U trunk/src/lib/rpc/clnt_tcp.c
From: tlyu@mit.edu
Subject: SVN Commit

pull up r24967 from trunk

------------------------------------------------------------------------
r24967 | ghudson | 2011-06-13 14:54:33 -0400 (Mon, 13 Jun 2011) | 12 lines

ticket: 6920
subject: Fix old-style GSSRPC authentication
target_version: 1.9.2
tags: pullup

r24147 (ticket #6746) made libgssrpc ignorant of the remote address of
the kadmin socket, even when it's IPv4. This made old-style GSSAPI
authentication fail because it uses the wrong channel bindings. Fix
this problem by making clnttcp_create() get the remote address from
the socket using getpeername() if the caller doesn't provide it and
it's an IPv4 address.

https://github.com/krb5/krb5/commit/879fd42ed181f236590ebd676bb98f847ff38076
Commit By: tlyu
Revision: 24971
Changed Files:
U branches/krb5-1-9/src/lib/rpc/clnt_tcp.c