Bug 1850959 - Fix SPNEGO mech filtering
Summary: Fix SPNEGO mech filtering
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: krb5
Version: 32
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: ---
Assignee: Robbie Harwood
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-06-25 09:26 UTC by Michal Nowak
Modified: 2020-07-01 19:12 UTC (History)
7 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2020-07-01 19:12:36 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Michal Nowak 2020-06-25 09:26:54 UTC
Description of problem:

We face problems deploying Fedora 32 to our CI (gitlab.isc.org) as krb5 1.18 which it includes has a regression in SPNEGO [1]. This bug was fixed in upstream version 1.18.2:

"Fix a SPNEGO regression where an acceptor using the default credential would improperly filter mechanisms, causing a negotiation failure."

Or at least fix the SPNEGO bug on Fedora side.

Version-Release number of selected component (if applicable):

krb5-1.18-1.fc32.x86_64

[1] https://gitlab.isc.org/isc-projects/bind9/-/issues/1787

Comment 1 Fedora Update System 2020-06-25 19:52:37 UTC
FEDORA-2020-b87f4a9864 has been submitted as an update to Fedora 32. https://bodhi.fedoraproject.org/updates/FEDORA-2020-b87f4a9864

Comment 2 Fedora Update System 2020-06-26 01:25:39 UTC
FEDORA-2020-b87f4a9864 has been pushed to the Fedora 32 testing repository.
In short time you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2020-b87f4a9864`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2020-b87f4a9864

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 3 Michal Nowak 2020-06-26 06:49:37 UTC
Thanks Robbie, very much appreciated!

Comment 4 Fedora Update System 2020-06-27 02:07:03 UTC
FEDORA-2020-b87f4a9864 has been pushed to the Fedora 32 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 5 Robbie Harwood 2020-07-01 19:12:36 UTC
Bodhi... chose not to close the bug I guess.


Note You need to log in before you can comment on or make changes to this bug.