SPNEGO and Kerberos credentials
bryan at kadzban.is-a-geek.net
Thu Jul 3 21:19:39 EDT 2008
-----BEGIN PGP SIGNED MESSAGE-----
S Rahul wrote:
> But if I select SPNEGO as the mechanism, the credential does not pass
> down to krb5_gss_accept_sec_context(). It gets filtered in the GSSAPI
> layer itself and a new credential is generated when
> spnego_gss_accept_sec_context() calls gss_accept_sec_context().
This sounds similar to the issue I had a few weeks back with SPNEGO and
storing delegated credentials. See krbdev RT, ticket 5807  for one
patch, and see Debian bug 480434  for another.
Looks like your patch modifies the same function as both of these
patches, though it modifies it differently. Do either of these patches
solve the problem you're seeing, or is ypur issue actually different?
(Both patches are basically equivalent: both return the krb5 credential
instead of failing, when the input is an SPNEGO credential. The only
difference is how they get to the SPNEGO OID, to compare it.)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
-----END PGP SIGNATURE-----
More information about the krbdev