svn rev #20001: branches/krb5-1-6/ src/windows/identity/plugins/krb5/

tlyu@MIT.EDU tlyu at MIT.EDU
Fri Sep 28 19:39:07 EDT 2007


Commit By: tlyu
Log Message: 
ticket: 5687
version_fixed: 1.6.3

pull up r19866 from trunk

 r19866 at cathode-dark-space:  jaltman | 2007-08-24 10:49:42 -0400
 ticket: new 
 subject: NIM: External changes to default identity are improperly reflected by krb5 provider
 component: windows
 
 The Kerberos v5 identity provider for Network Identity Manager
 monitors the "Software\MIT\kerberos5" registry key for the logged in
 user for changes to the "ccname" value.  If a change is noticed, it
 would query the Kerberos v5 library for the default credentials cache
 and attempt to determine the new default identity, which it would then
 communicate to the Network Identity Manager application.
 
 When the identity provider queried the Kerberos v5 library after a
 registry change notification, it used a cached krb5_context for the
 thread.  The default credentials cache found using this krb5_context
 may not be what the registry specified.
 
 This patch modifies the code in k5_ccname_monitor_thread() to create a
 use a new krb5_context when querying for the default credentials cache
 following a registry change notification.  Doing so ensures that
 Kerberos v5 library takes the new registry value into account.
 
 
 




Changed Files:
_U  branches/krb5-1-6/
U   branches/krb5-1-6/src/windows/identity/plugins/krb5/krb5identpro.c



More information about the cvs-krb5 mailing list