Bug 1057338

Summary:	authenticate_gss_client_wrap() fails to wrap username correctly
Product:	[Fedora] Fedora	Reporter:	Rob Crittenden <rcritten>
Component:	python-kerberos	Assignee:	Rob Crittenden <rcritten>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	urgent	Docs Contact:
Priority:	unspecified
Version:	20	CC:	abokovoy, jesse, rcritten, redhat
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	python-kerberos-1.1-13.fc20	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:	1057333	Environment:
Last Closed:	2014-02-22 00:45:12 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1057333, 1112373
Bug Blocks:

Description Rob Crittenden 2014-01-23 20:59:13 UTC

+++ This bug was initially created as a clone of Bug #1057333 +++

Description of problem:

python-kerberos 1.1 includes an off-by-one bug, with the result that it incorrectly encodes the Kerberos username into a GSSAPI message and authentication always fails. The bug was reported and fixed upstream:

http://trac.calendarserver.org/ticket/355

Version-Release number of selected component (if applicable):

1.1

How reproducible:

Always.

Additional info:

Remove the " + 1" from the end of line 358 in python-kerberos-1.1/src/kerberosgss.c and rebuild python-kerberos. Authentication now succeeds. This is the fix to issue 355 upstream:

http://trac.calendarserver.org/ticket/355

http://trac.calendarserver.org/changeset?reponame=&new=4895%40PyKerberos%2Ftrunk&old=4241%40PyKerberos%2Ftrunk

--- Additional comment from RHEL Product and Program Management on 2014-01-23 15:54:18 EST ---

Since this bug report was entered in bugzilla, the release flag has been
set to ? to ensure that it is properly evaluated for this release.

--- Additional comment from A. Jesse Jiryu Davis on 2014-01-23 15:58:49 EST ---

Discovered via this PyMongo bug report:

https://jira.mongodb.org/browse/PYTHON-626

Comment 1 Fedora Update System 2014-02-11 21:21:38 UTC

python-kerberos-1.1-13.fc20 has been submitted as an update for Fedora 20.
https://admin.fedoraproject.org/updates/python-kerberos-1.1-13.fc20

Comment 2 Fedora Update System 2014-02-12 14:36:46 UTC

Package python-kerberos-1.1-13.fc20:
* should fix your issue,
* was pushed to the Fedora 20 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing python-kerberos-1.1-13.fc20'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2014-2338/python-kerberos-1.1-13.fc20
then log in and leave karma (feedback).

Comment 3 Fedora Update System 2014-02-22 00:45:12 UTC

python-kerberos-1.1-13.fc20 has been pushed to the Fedora 20 stable repository.  If problems still persist, please make note of it in this bug report.