[prev in list] [next in list] [prev in thread] [next in thread] 

List:       krbdev
Subject:    Re: gss_krb5_import_cred fails for Samba
From:       Luke Howard <lukeh () padl ! com>
Date:       2011-07-23 10:54:00
Message-ID: 01380D2E-2B13-4EFB-9A3D-0386D43E08DB () padl ! com
[Download RAW message or body]


On 23/07/2011, at 3:29 AM, Greg Hudson wrote:

> On Fri, 2011-07-22 at 20:14 -0400, Andrew Bartlett wrote:
>> This case is where the principal is specified, and the incoming GSSAPI
>> request has the same key and knvo, but a different server name?
> 
> Contrary to what Luke says, I would expect this to work out of the box
> in krb5 1.9.  If you look at the logic of
> krb5_rd_req_decrypt_tkt_part() in rd_req_dec.c, you'll see that if
> server != NULL, we look up server in the keytab and ignore
> req->ticket->server.


That is what I said (or intended to say). :-)

-- Luke
_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
[prev in list] [next in list] [prev in thread] [next in thread]