[modauthkerb] Saving credential with KrbSaveCredentials

[Henry B. Hotz]

On Aug 28, 2007, at 2:51 AM, Mikkel Kruse Johnsen wrote:

> Hi Rob
>
> The latest patch was a big mess and the way I made mod_auth_kerb  
> use it's internal SPNEGO was not good. An options in configure  
> should properbly be made (--enable-internal-spnego).
>
> But since the problem is not really with mod_auth_kerb but with MIT  
> kerberos, I was hoping that someone on the kerberos list had  
> responded.
>
> I am planing on filing a bug report on RHEL5 (it works on RHEL4  
> where it uses the internal SPNEGO). But have not done it yet.
>
> But feel free to send the patch upstream (I don't know what that  
> involves).

If "upstream" means MIT, then you send it to krb5-bugs at mit.edu.   
Should include the output of "krb5-config --version" as a minimum.  I  
suspect they have already fixed the bug, so the issue would be RedHat  
not keeping up with MIT.

> /Mikkel
>
> On Mon, 2007-08-27 at 11:55 -0400, Rob Crittenden wrote:
>> Mikkel Kruse Johnsen wrote:
>> > Hi All
>> >
>> > I got it to work. It seems there is an error in the SPNEGO code  
>> on MIT
>> > Kerberos. When compiling mod_auth_kerb to use it's internal  
>> SPNEGO code
>> > everything works fine.
>> >
>>
>> This patch works for me as well. I simplified it significantly to  
>> just using the internal SPNEGO library, including the #ifndef  
>> GSSAPI_SUPPORTS_SPNEGO around cmp_gss_type() and including the  
>> acc_ret_flags option.
>>
>> Are you planning to submit this upstream?
>>
>> And finally, thanks for continuing to work on this until you  
>> figured it out!
>>
>> regards rob
>> !DSPAM:46d2f40a216093430311512!
> Mikkel Kruse Johnsen
> Adm.Dir.
>
> Linet
------------------------------------------------------------------------
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz at jpl.nasa.gov, or hbhotz at oxy.edu