[CalendarServer-changes] [14486] PyKerberos/trunk/src/kerberosgss.c

source_changes at macosforge.org source_changes at macosforge.org
Fri Feb 27 14:11:25 PST 2015


Revision: 14486
          http://trac.calendarserver.org//changeset/14486
Author:   wsanchez at apple.com
Date:     2015-02-27 14:11:25 -0800 (Fri, 27 Feb 2015)
Log Message:
-----------
Enable delegation.
Submitted by hugh.xie at bankofamerica.com.
Fixes #862.

Modified Paths:
--------------
    PyKerberos/trunk/src/kerberosgss.c

Modified: PyKerberos/trunk/src/kerberosgss.c
===================================================================
--- PyKerberos/trunk/src/kerberosgss.c	2015-02-27 21:28:03 UTC (rev 14485)
+++ PyKerberos/trunk/src/kerberosgss.c	2015-02-27 22:11:25 UTC (rev 14486)
@@ -189,7 +189,7 @@
         maj_stat = gss_delete_sec_context(&min_stat, &state->context, GSS_C_NO_BUFFER);
     if (state->server_name != GSS_C_NO_NAME)
         maj_stat = gss_release_name(&min_stat, &state->server_name);
-    if (state->client_creds != GSS_C_NO_CREDENTIAL)
+    if (state->client_creds != GSS_C_NO_CREDENTIAL && !(state->gss_flags & GSS_C_DELEG_FLAG))
         maj_stat = gss_release_cred(&min_stat, &state->client_creds);
     if (state->username != NULL)
     {
@@ -471,8 +471,8 @@
         }
         
         // Get credentials
-        maj_stat = gss_acquire_cred(&min_stat, state->server_name, GSS_C_INDEFINITE,
-                                    GSS_C_NO_OID_SET, GSS_C_ACCEPT, &state->server_creds, NULL, NULL);
+        maj_stat = gss_acquire_cred(&min_stat, GSS_C_NO_NAME, GSS_C_INDEFINITE,
+                                    GSS_C_NO_OID_SET, GSS_C_BOTH, &state->server_creds, NULL, NULL);
         
         if (GSS_ERROR(maj_stat))
         {
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.macosforge.org/pipermail/calendarserver-changes/attachments/20150227/a87d54f9/attachment.html>


More information about the calendarserver-changes mailing list