On Aug 28, 2007, at 2:51 AM, Mikkel Kruse Johnsen wrote: > Hi Rob > > The latest patch was a big mess and the way I made mod_auth_kerb > use it's internal SPNEGO was not good. An options in configure > should properbly be made (--enable-internal-spnego). > > But since the problem is not really with mod_auth_kerb but with MIT > kerberos, I was hoping that someone on the kerberos list had > responded. > > I am planing on filing a bug report on RHEL5 (it works on RHEL4 > where it uses the internal SPNEGO). But have not done it yet. > > But feel free to send the patch upstream (I don't know what that > involves).
If "upstream" means MIT, then you send it to [EMAIL PROTECTED] Should include the output of "krb5-config --version" as a minimum. I suspect they have already fixed the bug, so the issue would be RedHat not keeping up with MIT. > /Mikkel > > On Mon, 2007-08-27 at 11:55 -0400, Rob Crittenden wrote: >> Mikkel Kruse Johnsen wrote: >> > Hi All >> > >> > I got it to work. It seems there is an error in the SPNEGO code >> on MIT >> > Kerberos. When compiling mod_auth_kerb to use it's internal >> SPNEGO code >> > everything works fine. >> > >> >> This patch works for me as well. I simplified it significantly to >> just using the internal SPNEGO library, including the #ifndef >> GSSAPI_SUPPORTS_SPNEGO around cmp_gss_type() and including the >> acc_ret_flags option. >> >> Are you planning to submit this upstream? >> >> And finally, thanks for continuing to work on this until you >> figured it out! >> >> regards rob >> !DSPAM:46d2f40a216093430311512! > Mikkel Kruse Johnsen > Adm.Dir. > > Linet ------------------------------------------------------------------------ The opinions expressed in this message are mine, not those of Caltech, JPL, NASA, or the US Government. [EMAIL PROTECTED], or [EMAIL PROTECTED] ________________________________________________ Kerberos mailing list Kerberos@mit.edu https://mailman.mit.edu/mailman/listinfo/kerberos
