[krbdev.mit.edu #3502] Cannot acquire initiator cred using gss_acquire_cred with explicit name on Windows

Jeffrey Altman via RT rt-comment at krbdev.mit.edu
Fri Mar 10 20:09:22 EST 2006


I need to correct my previous statement - actually, both 1 and 2
fails with the same error code and message, e.g. FAILURE "Matching
credential not found".

gss_acquire_cred() succeeds when I either uses GSS_C_NO_NAME or
the name handle which I got back as a result of gss_inquire_cred()
whose cred is acquired w/ GSS_C_NO_NAME.

Anyhow, here is the code snippet:

nameVal.value = "dummy"; //"dummy at JSN.SFBAY.SUN.COM";
nameVal.length = strlen(nameVal.value)+1;
nameType = GSS_C_NT_USER_NAME;
major = gss_import_name(&minor, &nameVal, nameType, &nameHdl);
displayStatus(header, "gss_import_name", major, minor, GSS_C_NO_OID);
fprintf(stdout,"[%s] IMPORTED NAME=%d\n", header, nameHdl);

major = gss_acquire_cred(&minor, nameHdl, GSS_C_INDEFINITE,
    desired_mechs, GSS_C_INITIATE, &credHdl, NULL, NULL);
fprintf(stdout,"[%s] ACQUIRED INIT CRED USING SPECIFIED NAME\n",
    header);
displayStatus(header, "client's gss_acquire_cred", major, minor, mech);

Thanks,
Valerie 



More information about the krb5-bugs mailing list