[2209] in Kerberos-V5-bugs

home help back first fref pref prev next nref lref last post

Re: krb5_fcc_retrieve() question

daemon@ATHENA.MIT.EDU (Sam Hartman)
Fri Sep 6 20:44:49 1996

To: "Kenneth D. Renard" (ASHPC) <kdrenard@ARL.MIL>
Cc: krb5-bugs@MIT.EDU
From: Sam Hartman <hartmans@MIT.EDU>
Date: 06 Sep 1996 20:44:06 -0400
In-Reply-To: "Kenneth D. Renard"'s message of Fri, 6 Sep 96 11:24:04 EDT

>>>>> ""Kenneth" == "Kenneth D Renard" (ASHPC) <kdrenard@ARL.MIL> writes:

    "Kenneth> Kerberos V5 Beta 6 lib/krb5/ccache/file/fcc_retrv.c,
    "Kenneth> function srvname_match(), line #195

    "Kenneth> Shouldn't this match the server principals not the
    "Kenneth> client principals?
    "Kenneth> [i.e. krb5_principal_compare(context,
    "Kenneth> mcreds->server,creds->server);] ^^^^^^ ^^^^^^

	Possibly.  It's either miss-named or wrongly implemented.
It's not clear to me when you'd use it from a 30 second glance , but I
agree we should examine it.

    "Kenneth> Thanks for the info!

    "Kenneth> -Ken Renard Army Research Lab (410) 278-8940


    "Kenneth> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
    "Kenneth> /* only match the server name portion, not the server
    "Kenneth> realm portion */

    "Kenneth> static krb5_boolean srvname_match(context, mcreds,
    "Kenneth> creds) krb5_context context; register const krb5_creds
    "Kenneth> *mcreds, *creds; { krb5_boolean retval;
    "Kenneth> krb5_principal_data p1, p2;

    "Kenneth> !  retval = krb5_principal_compare(context,
    "Kenneth> mcreds->client,creds->client); if (retval != TRUE)
    "Kenneth> return retval; /* * Hack to ignore the server realm for
    "Kenneth> the purposes of the compare.  */ p1 = *mcreds->server;
    "Kenneth> p2 = *creds->server; p1.realm = p2.realm; return
    "Kenneth> krb5_principal_compare(context, &p1, &p2); }
    "Kenneth> -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
    "Kenneth> 


home help back first fref pref prev next nref lref last post