[modauthkerb] Saving credential with KrbSaveCredentials
Henry B. Hotz
hotz at jpl.nasa.gov
Tue Aug 28 19:48:35 EDT 2007
On Aug 28, 2007, at 2:51 AM, Mikkel Kruse Johnsen wrote:
> Hi Rob
>
> The latest patch was a big mess and the way I made mod_auth_kerb
> use it's internal SPNEGO was not good. An options in configure
> should properbly be made (--enable-internal-spnego).
>
> But since the problem is not really with mod_auth_kerb but with MIT
> kerberos, I was hoping that someone on the kerberos list had
> responded.
>
> I am planing on filing a bug report on RHEL5 (it works on RHEL4
> where it uses the internal SPNEGO). But have not done it yet.
>
> But feel free to send the patch upstream (I don't know what that
> involves).
If "upstream" means MIT, then you send it to krb5-bugs at mit.edu.
Should include the output of "krb5-config --version" as a minimum. I
suspect they have already fixed the bug, so the issue would be RedHat
not keeping up with MIT.
> /Mikkel
>
> On Mon, 2007-08-27 at 11:55 -0400, Rob Crittenden wrote:
>> Mikkel Kruse Johnsen wrote:
>> > Hi All
>> >
>> > I got it to work. It seems there is an error in the SPNEGO code
>> on MIT
>> > Kerberos. When compiling mod_auth_kerb to use it's internal
>> SPNEGO code
>> > everything works fine.
>> >
>>
>> This patch works for me as well. I simplified it significantly to
>> just using the internal SPNEGO library, including the #ifndef
>> GSSAPI_SUPPORTS_SPNEGO around cmp_gss_type() and including the
>> acc_ret_flags option.
>>
>> Are you planning to submit this upstream?
>>
>> And finally, thanks for continuing to work on this until you
>> figured it out!
>>
>> regards rob
>> !DSPAM:46d2f40a216093430311512!
> Mikkel Kruse Johnsen
> Adm.Dir.
>
> Linet
------------------------------------------------------------------------
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz at jpl.nasa.gov, or hbhotz at oxy.edu
More information about the Kerberos
mailing list