Attachment 212911 Details for Bug 301061 – like Rob's patch, but also checks for GSS_C_DELEG_FLAG in the returned flags set

[patch] like Rob's patch, but also checks for GSS_C_DELEG_FLAG in the returned flags set

mod_auth_kerb-5.1-delegate.patch (text/plain), 1.07 KB, created by Nalin Dahyabhai on 2007-10-01 21:49:11 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Nalin Dahyabhai

Created: 2007-10-01 21:49:11 UTC

Size: 1.07 KB

patch

obsolete

>--- src/mod_auth_kerb.c	2007-10-01 17:43:13.000000000 -0400
>+++ src/mod_auth_kerb.c	2007-10-01 17:44:23.000000000 -0400
>@@ -1197,7 +1197,7 @@
> authenticate_user_gss(request_rec *r, kerb_auth_config *conf,
> 		      const char *auth_line, char **negotiate_ret_value)
> {
>-  OM_uint32 major_status, minor_status, minor_status2;
>+  OM_uint32 major_status, minor_status, minor_status2, gss_flags;
>   gss_buffer_desc input_token = GSS_C_EMPTY_BUFFER;
>   gss_buffer_desc output_token = GSS_C_EMPTY_BUFFER;
>   const char *auth_param = NULL;
>@@ -1276,7 +1276,7 @@
> 				  &client_name,
> 				  NULL,
> 				  &output_token,
>-				  NULL,
>+				  &gss_flags,
> 				  NULL,
> 				  &delegated_cred);
>   log_rerror(APLOG_MARK, APLOG_DEBUG, 0, r,
>@@ -1350,7 +1350,9 @@
>   }
> #endif
> 
>-  if (conf->krb_save_credentials && delegated_cred != GSS_C_NO_CREDENTIAL)
>+  if (conf->krb_save_credentials &&
>+      (gss_flags & GSS_C_DELEG_FLAG) &&
>+      delegated_cred != GSS_C_NO_CREDENTIAL)
>      store_gss_creds(r, conf, (char *)output_token.value, delegated_cred);
> 
>   gss_release_buffer(&minor_status, &output_token);

Actions: View | Diff

Attachments on bug 301061: 212781 | 212861 | 212911