Your message dated Wed, 09 Jan 2008 19:19:35 -0800
with message-id <[EMAIL PROTECTED]>
and subject line Fixed in 1.7-1
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message ---
Subject: libauthen-krb5-perl: TGTs should be requested 'forwardable'
Package: libauthen-krb5-perl
Version: 1.6-2
Severity: wishlist
*** Please type your report below this line ***
Hi,
it would be nice having libauthen-krb5-perl fetch 'forwardable' TGTs
by default or to make TGT flags optional. Otherwise it's impossible to use
libauthen-krb5-perl-fetched TGTs for e.g. authentication over ssh.
This is a patch making fetched TGTs (hardcoded) 'forwardable':
--- Krb5.xs.old 2006-06-11 18:37:01.000000000 +0200
+++ Krb5.xs 2006-10-02 17:57:42.000000000 +0200
@@ -331,7 +331,7 @@
cr.times.endtime = now + KRB5_DEFAULT_LIFE;
cr.times.renew_till = 0;
- err = krb5_get_in_tkt_with_password(context, 0, 0, NULL, NULL,
+ err = krb5_get_in_tkt_with_password(context, TKT_FLG_FORWARDABLE, 0,
NULL, NULL,
password, cc, &cr, 0);
if (err) XSRETURN_UNDEF;
@@ -358,7 +358,7 @@
cr.times.endtime = now + KRB5_DEFAULT_LIFE;
cr.times.renew_till = 0;
- err = krb5_get_in_tkt_with_keytab(context, 0, 0, NULL, NULL,
+ err = krb5_get_in_tkt_with_keytab(context, TKT_FLG_FORWARDABLE, 0,
NULL, NULL,
keytab, cc, &cr, 0);
if (err) XSRETURN_UNDEF;
Regards,
Frank
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18.0-f3
Locale: LANG=de_DE, LC_CTYPE=de_DE (charmap=ISO-8859-1) (ignored: LC_ALL set to
de_DE)
Versions of packages libauthen-krb5-perl depends on:
ii libc6 2.3.6.ds1-4 GNU C Library: Shared libraries
ii libcomerr2 1.39-1 common error description library
ii libkrb53 1.4.4-3 MIT Kerberos runtime libraries
ii perl 5.8.8-6.1 Larry Wall's Practical Extraction
ii perl-base [perlapi-5.8.8] 5.8.8-6.1 The Pathologically Eclectic Rubbis
libauthen-krb5-perl recommends no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
This should be fixed in 1.7-1, which should now honor your krb5.conf
settings. I rewrote the relevant API calls to use the new library API
instead of the old one, which fixes option handling.
--
Russ Allbery ([EMAIL PROTECTED]) <http://www.eyrie.org/~eagle/>
--- End Message ---
