Fwd: Bug#480434: libkrb53: Delegation fails if an SPNEGO credential is passed to gss_krb5_copy_ccache

Tom Yu tlyu at MIT.EDU
Wed May 21 23:42:33 EDT 2008


Russ Allbery <rra at stanford.edu> writes:

> Russ Allbery <rra at stanford.edu> writes:
>> Russ Allbery <rra at stanford.edu> writes:
>
>>> Another patch that looks right, but for which I'd like to get a review
>>> before I go ahead with it (and again, I can commit this directly to the
>>> MIT tree as well if approved).
>
>>> Let me know if I should file these as bugs first, instead of creating a
>>> ticket on commit after approval here.
>
>> http://bugs.debian.org/480434
>
> This is #5807.  The Debian bug has a slightly different fix; I don't know
> which one is better from a coding style perspective.

They are very similar.  I am slightly inclined to go with the Debian
patch, but I don't think it's that important.

We should note that this is an interim solution and that we should
have a better way of dealing with the general problem of "unwrapping"
objects produced by pseudo-mechanisms.

Does anyone have strong opinions on which patch is best?



More information about the krbdev mailing list