[4169] in Kerberos-V5-bugs
[krbdev.mit.edu #1445] GSSAPI can fail to generate error in
daemon@ATHENA.MIT.EDU (Sam Hartman via RT)
Tue Apr 29 16:23:42 2003
Date: Tue, 29 Apr 2003 16:23:24 -0400 (EDT)
Message-Id: <rt-1445-5878.12.1970095716365@krbdev.mit.edu>
In-Reply-To: <rt-1445@krbdev.mit.edu>
From: "Sam Hartman via RT" <rt-comment@krbdev.mit.edu>
To: krb5-prs@mit.edu
Reply-To: rt-comment@krbdev.mit.edu
Errors-To: krb5-bugs-bounces@mit.edu
Nico points out that in accept_sec_context, cred->princ is used as the
server component of the call to krb5_mk_error.
This is problematic because sname and srealm are required fields and
cred->princ can be null in the gss_c_no_credential case.
I believe that if cred->princ is null you can get the principal out of
the decoded ap_req.
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
http://mailman.mit.edu/mailman/listinfo/krb5-bugs
