Bug 1284985

Summary:	Please backport fix for interposer
Product:	[Fedora] Fedora	Reporter:	Simo Sorce <ssorce>
Component:	krb5	Assignee:	Robbie Harwood <rharwood>
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	23	CC:	abokovoy, j, nalin, nathaniel, rharwood, ssorce
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	krb5-1.14-3.fc23	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:
Clones:	1284987 (view as bug list)		Environment:
Last Closed:	2015-12-14 10:20:33 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1284987

Description Simo Sorce 2015-11-24 15:46:31 UTC

Upstream pull request with explanation here:
https://github.com/krb5/krb5/pull/348

This is required to be able to properly interpose the gss_acquire_cred_impersonate_name() call used by some applications.

Comment 1 Robbie Harwood 2015-11-24 17:23:07 UTC

I will do this once the 1.14 update has landed in Fedora (due to the way bodhi works, I need to wait here): https://bodhi.fedoraproject.org/updates/FEDORA-2015-3e75abf2a3

Is this just needed for f23 or do f22/f21 need it as well?

Comment 2 Simo Sorce 2015-11-24 18:07:08 UTC

We do not have implemented impersonate_name in GSS-Proxy yet, and I was planning to land this change only in F23 for now.
If we decide to ship a newer GSS-Proxy in older Fedora versions, then we'll probably wan tto backport this fiox there too.

Let's start with F23 for now.

Comment 3 Fedora Update System 2015-12-10 20:01:46 UTC

krb5-1.14-3.fc23 has been submitted as an update to Fedora 23. https://bodhi.fedoraproject.org/updates/FEDORA-2015-584b2829d6

Comment 4 Fedora Update System 2015-12-11 05:59:31 UTC

krb5-1.14-3.fc23 has been pushed to the Fedora 23 testing repository. If problems still persist, please make note of it in this bug report.
If you want to test the update, you can install it with
$ su -c 'dnf --enablerepo=updates-testing update krb5'
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2015-584b2829d6

Comment 5 Fedora Update System 2015-12-14 10:20:29 UTC

krb5-1.14-3.fc23 has been pushed to the Fedora 23 stable repository. If problems still persist, please make note of it in this bug report.