[33216] in Kerberos
Re: GSSAPI issue from Windows clients
daemon@ATHENA.MIT.EDU (Carson Gaspar)
Thu Feb 17 11:31:14 2011
Message-ID: <4D5D4D47.7060908@taltos.org>
Date: Thu, 17 Feb 2011 08:31:03 -0800
From: Carson Gaspar <carson@taltos.org>
MIME-Version: 1.0
To: Greg Hudson <ghudson@mit.edu>
In-Reply-To: <1297872710.5931.149.camel@t410>
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On 2/16/11 8:11 AM, Greg Hudson wrote:
> You've found an interop bug, which I think (and hope) only happens in
> pretty specific circumstances. Here's what I think is happening:
[Amazingly precise explanation elided]
> I've attached a lightly tested patch to make these changes if you want
> to try it yourself.
I have verified that applying this patch fixes the observed bug, and
GSSKEX / GSSAPI auth now work properly from our windows clients. I've
forwarded a RHEL6 specific patch (just fixed offsets, basically) to RedHat.
Many thanks for the fast and high quality response.
--
Carson
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
