Re: Difference in handling SPNEGO tokens between heimdal 0.7.2 , 0.8.1 and 1.0.1

[Love Hörnquist Åstrand <lha@kth.se>]

Hej Markus,


>> When I use in case 4) instead of GSS_C_NO_NAME  HTTP/fqdn I get the
>> following error:
>>
>> [Sat Nov 10 16:37:54 2007] [error] [client 192.168.1.10] mod_spnego:
>> gss_accept_sec_context failed; GSS-API:  Miscellaneous failure (see  
>> text))
>> [Sat Nov 10 16:37:54 2007] [error] [client 192.168.1.10] mod_spnego:
>> gss_accept_sec_context failed; GSS-API mechanism: Decrypt integrity  
>> check
>> failedxt))
>>
>> It seems gss_acquire_creds needs a desired name != GSS_C_NO_NAME   
>> to accept
>> kerberos 5 as a mechanism.
>> e.g. In acquire_acceptor_cred
>
> This seems to be the case. I never expected that people would use  
> gss_acquire_cred()
> without name. The gss_acccept_sec_context() supports that, so I  
> guess this should be fixed.

This should be fixed in 1.0.2RC5, if its not, please try  
heimdal-20071205.dmg too since there are more fixes for related stuff  
i fixed todo.

Love