[3972] in Kerberos-V5-bugs
[krbdev.mit.edu #1365] Remove caching of default initiator GSS
daemon@ATHENA.MIT.EDU (Nicolas Williams via RT)
Sat Mar 1 16:30:00 2003
Date: Sat, 1 Mar 2003 16:29:15 -0500 (EST)
Message-Id: <rt-1365-4657.17.7744072208129@krbdev.mit.edu>
In-Reply-To: <rt-1365@krbdev.mit.edu>
From: "Nicolas Williams via RT" <rt-comment@krbdev.mit.edu>
To: krb5-prs@mit.edu
Reply-To: rt-comment@krbdev.mit.edu
Errors-To: krb5-bugs-bounces@mit.edu
There is no need for gss_inquire_cred(GSS_C_NO_CREDENTIAL) to have any
sort of predictable outputs; its outputs should always reflect the
current state of the user's ccache, and not that of the user's ccache at
the time that GSS_C_NO_CREDENTIAL is first referred to.
Applications that need to know details of the default credential used to
initiate some context, such as initiator name or credential lifetime,
can get the information by inquiring the context and should not assume
that the outputs of gss_inquire_cred(GSS_C_NO_CREDENTIAL) will reflect
the same values as used during the initiation of any one context.
Please remove this cache.
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
http://mailman.mit.edu/mailman/listinfo/krb5-bugs
