[19223] in Kerberos_V5_Development
Re: Ticket #8152 gss_acquire_cred_with_password() ignores expired
daemon@ATHENA.MIT.EDU (Greg Hudson)
Sun Jun 21 01:55:52 2015
Message-ID: <558651D8.7080200@mit.edu>
Date: Sun, 21 Jun 2015 01:55:36 -0400
From: Greg Hudson <ghudson@mit.edu>
MIME-Version: 1.0
To: Sorin Manolache <sorinm@gmail.com>, krbdev@mit.edu
In-Reply-To: <5585A520.3060707@gmail.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On 06/20/2015 01:38 PM, Sorin Manolache wrote:
> Thank you for the information. However I didn't get how you intend to
> change the behaviour.
Sorry if the ticket wasn't clear. As Ben explained, credentials will be
fetched into a unique memory ccache. The idea is that if you want to
interact with the shared cache, you can use gss_acquire_cred()
beforehand and gss_store_cred() afterwards. This new behavior matches
the original behavior of the function when it was introduced in Solaris;
I misguidedly changed it when we first introduced the function into MIT
krb5.
> The ticket mentions checking with Heimdal. Here's what I could
> understand from the Heimdal code:
Heimdal is also changing its behavior:
https://github.com/heimdal/heimdal/commit/db2ba88384dbf79cfeda339d9b6f8c1cc9032871
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
