[CalendarServer-changes] [14486] PyKerberos/trunk/src/kerberosgss.c
source_changes at macosforge.org
source_changes at macosforge.org
Fri Feb 27 14:11:25 PST 2015
Revision: 14486
http://trac.calendarserver.org//changeset/14486
Author: wsanchez at apple.com
Date: 2015-02-27 14:11:25 -0800 (Fri, 27 Feb 2015)
Log Message:
-----------
Enable delegation.
Submitted by hugh.xie at bankofamerica.com.
Fixes #862.
Modified Paths:
--------------
PyKerberos/trunk/src/kerberosgss.c
Modified: PyKerberos/trunk/src/kerberosgss.c
===================================================================
--- PyKerberos/trunk/src/kerberosgss.c 2015-02-27 21:28:03 UTC (rev 14485)
+++ PyKerberos/trunk/src/kerberosgss.c 2015-02-27 22:11:25 UTC (rev 14486)
@@ -189,7 +189,7 @@
maj_stat = gss_delete_sec_context(&min_stat, &state->context, GSS_C_NO_BUFFER);
if (state->server_name != GSS_C_NO_NAME)
maj_stat = gss_release_name(&min_stat, &state->server_name);
- if (state->client_creds != GSS_C_NO_CREDENTIAL)
+ if (state->client_creds != GSS_C_NO_CREDENTIAL && !(state->gss_flags & GSS_C_DELEG_FLAG))
maj_stat = gss_release_cred(&min_stat, &state->client_creds);
if (state->username != NULL)
{
@@ -471,8 +471,8 @@
}
// Get credentials
- maj_stat = gss_acquire_cred(&min_stat, state->server_name, GSS_C_INDEFINITE,
- GSS_C_NO_OID_SET, GSS_C_ACCEPT, &state->server_creds, NULL, NULL);
+ maj_stat = gss_acquire_cred(&min_stat, GSS_C_NO_NAME, GSS_C_INDEFINITE,
+ GSS_C_NO_OID_SET, GSS_C_BOTH, &state->server_creds, NULL, NULL);
if (GSS_ERROR(maj_stat))
{
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.macosforge.org/pipermail/calendarserver-changes/attachments/20150227/a87d54f9/attachment.html>
More information about the calendarserver-changes
mailing list