Thanks Wes,

With some minor alterations, it works.

First, in cgi/login.c, the *realm = '\0' should most likely be *realm == 
'\0'.

And for some reason the regex for the kerberos matching doesn't work, at 
least not on my FreeBSD install.
So in common/config.c, "\\([EMAIL PROTECTED])" can be replaced with "\\([EMAIL 
PROTECTED])" 
or "\\([EMAIL PROTECTED],\\}\\)" and then it works. (The old man page's 
"\\([EMAIL PROTECTED])" didn't work either.)

/Tobias

Wesley Craig wrote:
> Yup, that's a bug.  Please try the attached patch and let me know if 
> it corrects the problem.
>
> :wes
>
> On 14 Feb 2008, at 07:57, Tobias Franzén wrote:
>> When I attempt login with a username without an @ character, I can see
>> it trying to authenticate with my Heimdal ACL. If the username and
>> password doesn't match a valid user however, the CGI won't just quit
>> with some error, but will try over and over and over again relentlessly,
>> like a bee trying to get out through a window.
>>
>> I'm using CoSign version 2.1.0rc1.

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Cosign-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/cosign-discuss

Reply via email to