In working with getting afs interoperatabliy with the current globus version
4.2.1 i ran into a issue where the gssklog Version 0.11 utility was nolonger
able to work after say version 4.0.9 (vdt) due to a failure in mutal auth when
establishing the inital context. The deamon uses a service key gssklog/<fqdn>
and is looking for gssklog@<fqdn> ... the inital context fails comparing the
two hostnames 

origial link ftp://achilles.ctd.anl.gov/pub/DEE/
referance link http://www.hep.man.ac.uk/u/masj/gssklog/


There seems to be problem with getting mutual auth to work for the
globus service gssklog in the client application gssklog. the call to
gss_init_sec_context() fails comparing the returned CN with the expected
service/fqdn.  After some tracing i found if i added the service gssklog
to the globus_i_gsi_gssapi_get_hostname() function ( see below ) the
mutual auth worked as expected. This seemed to be a bit extreme to get
the mutual auth to work for a generic service as the only services
listed in the function were host/ and ftp/. I am wondering if i may have
missed something? 

Mike Coyne 

-------------cut-line---------------
Index:
trunk/gt4.2/source-trees/gsi/gssapi/source/library/globus_i_gsi_gss_utils.c
===================================================================
---
trunk/gt4.2/source-trees/gsi/gssapi/source/library/globus_i_gsi_gss_utils.c
(revision 540)
+++
trunk/gt4.2/source-trees/gsi/gssapi/source/library/globus_i_gsi_gss_utils.c
(revision 613)
@@ -2530,7 +2530,12 @@
         {
             length = name_entry->value->length;
             data = name_entry->value->data;
-            if ( length > 5 && !strncasecmp((char *) data, "host/", 5))
+            if ( length > 8 && !strncasecmp((char *) data, "gssklog/",
8))
+            {
+                length -= 8;
+                data += 8;
+            }
+            else  if ( length > 5 && !strncasecmp((char *) data,
"host/", 5))
             {
                 length -= 5;
                 data += 5;
-------------cut-line---------------