[36515] in Kerberos
Re: Not getting delegation credential from gss_accept_sec_context()
daemon@ATHENA.MIT.EDU (Greg Hudson)
Mon Oct 6 18:20:41 2014
Message-ID: <543315AC.5070200@mit.edu>
Date: Mon, 06 Oct 2014 18:20:28 -0400
From: Greg Hudson <ghudson@mit.edu>
MIME-Version: 1.0
To: "Xie, Hugh" <hugh.xie@bankofamerica.com>,
"Kerberos@mit.edu" <Kerberos@mit.edu>
In-Reply-To: <7E270C3427928E499F189C5636C52CDC45B77E59@smtp_mail.bankofamerica.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On 10/06/2014 04:49 PM, Xie, Hugh wrote:
> I created some printf to check verifier_cred_handle I passed into *gss_accept_sec_context()* are set back to GSS_C_NO_CREDENTIAL once it reach kg_accept_krb5(). That in turn cause one of the condition * cred->usage == GSS_C_BOTH * to be false. I definite verified verifier_cred_handle before I called gss_accept_sec_context(). And it is coming from a call:
[...]
> Anyway, please let me know I can debug this issue.
You haven't said what version of MIT krb5 you're using or on what
platform. I would suggest either stepping through the mechglue
gss_accept_sec_context (lib/gssapi/mechglue/g_accept_sec_context.c) in a
debugger, or adding printfs to it. I don't see anything obviously wrong
with your code snippet.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
