Bug 6706 - gss_export_sec_context and gss_import_sec_context don't generate independent tokens
: gss_export_sec_context and gss_import_sec_context don't generate independent ...
Status: ASSIGNED
: GSI C
Authentication
: development
: All All
: P3 normal
: ---
Assigned To:
:
:
:
:
  Show dependency treegraph
 
Reported: 2009-03-26 08:57 by
Modified: 2009-03-26 08:57 (History)


Attachments


Note

You need to log in before you can comment on or make changes to this bug.


Description From 2009-03-26 08:57:47
The interprocess token generated by gss_export_sec_context does not contain
enough information to re-import the security context. If the caller does not
have a default credential (gss_acquire_cred() fails), then the import fails.
I've worked around this in a gram dev branch by adding the GSS_C_ANON flag so
that it will generate a mostly usable context---the inquire functions will
still misbehave in this case, but otherwise the context can be used.