krb5_gss_acquire_cred() vs multiple credential caches

Jeffrey Altman jaltman at secure-endpoints.com
Mon Feb 12 08:12:46 EST 2007


Looking through the code again the Leash routines are in fact setting
the process environment variable

    if ( ccname && strcmp(ccachename,ccname) )
        SetEnvironmentVariable("KRB5CCNAME",ccname);

The problem is that krb5int_cc_default() doesn't see the variable
because the C Runtime Library environment block is a clone from when the
process started.

Replacing getenv/putenv with
GetEnvironmentVariable/SetEnvironmentVariable needs to get done for 1.7.

Jeffrey Altman



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3355 bytes
Desc: S/MIME Cryptographic Signature
Url : http://mailman.mit.edu/pipermail/krbdev/attachments/20070212/cd433ce6/attachment.bin


More information about the krbdev mailing list