Viewing Incoming/6225
Full headers

Major security issue: yes  no

Notes:

Notification:

Date: Wed, 22 Jul 2009 18:49:16 +0000
From: mimir@samba.org
To: openldap-its@OpenLDAP.org
Subject: GSSAPI support for client library (fixes)

Full_Name: Rafal Szczesniak
Version: Stable (2.4.16)
OS: GNU/Linux
URL: http://www.samba.org/~mimir/gssapi-bugfix.diff
Submission from: (NULL) (67.51.54.234)


This is a bugfix patch for OpenLDAP's gssapi support.

Followup 1

Date: Fri, 24 Jul 2009 21:20:46 -0700
From: Howard Chu <hyc@symas.com>
To: mimir@samba.org
CC: openldap-its@openldap.org
Subject: Re: (ITS#6225) GSSAPI support for client library (fixes)

mimir@samba.org wrote:
> Full_Name: Rafal Szczesniak
> Version: Stable (2.4.16)
> OS: GNU/Linux
> URL: http://www.samba.org/~mimir/gssapi-bugfix.diff
> Submission from: (NULL) (67.51.54.234)
>
>
> This is a bugfix patch for OpenLDAP's gssapi support.
>
One of these patches appears to duplicate ITS#6092. As the original author of 
this code, could you also take a look at #6091 and #6093?

-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/

Followup 2

Date: Wed, 29 Jul 2009 20:53:51 +0200
From: mikbec <mikbec@web.de>
To: hyc@symas.com
CC: openldap-its@openldap.org
Subject: Re: (ITS#6225) GSSAPI support for client library (fixes)

hyc@symas.com wrote:
> mimir@samba.org wrote:
>> Full_Name: Rafal Szczesniak
>> Version: Stable (2.4.16)
>> OS: GNU/Linux
>> URL: http://www.samba.org/~mimir/gssapi-bugfix.diff
>> Submission from: (NULL) (67.51.54.234)
>>
>>
>> This is a bugfix patch for OpenLDAP's gssapi support.
>>
> One of these patches appears to duplicate ITS#6092. As the original author
of 
> this code, could you also take a look at #6091 and #6093?
> 
Yes, I think this patch tries to resolve the same problem like #6093 but
with a different approach. And after some discussion with Hallvard B
Furuseth about the guess_service_principal() string problem (#6223) I
have sent a all-in-one-patch which results in #6110.

best regards
   mike

Followup 3

Date: Sat, 15 Aug 2009 13:07:58 +0200
From: Rafal Szczesniak <mimir@samba.org>
To: Howard Chu <hyc@symas.com>
Cc: openldap-its@openldap.org
Subject: Re: (ITS#6225) GSSAPI support for client library (fixes)

--fUYQa+Pmc3FrFX/N
Content-Type: text/plain; charset=iso-8859-2
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Fri, Jul 24, 2009 at 09:20:46PM -0700, Howard Chu wrote:
> mimir@samba.org wrote:
>> Full_Name: Rafal Szczesniak
>> Version: Stable (2.4.16)
>> OS: GNU/Linux
>> URL: http://www.samba.org/~mimir/gssapi-bugfix.diff
>> Submission from: (NULL) (67.51.54.234)
>>
>>
>> This is a bugfix patch for OpenLDAP's gssapi support.
>>
> One of these patches appears to duplicate ITS#6092. As the original=20
> author of this code, could you also take a look at #6091 and #6093?

Yes, will do. Sorry about late reply, but first I was travelling and then
I went for a holidays.


cheers,
--=20
Rafal Szczesniak
Samba Team member   http://www.samba.org
Likewise Software   http://www.likewise.com


--fUYQa+Pmc3FrFX/N
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iD8DBQFKhpcNHvdfyv3qiKkRAnssAKCaoT2CpqhPfHkmx1sATZBQREFgIQCfVKz6
L6ab8DXdz3XlCQqrRsul6Cw=
=MklT
-----END PGP SIGNATURE-----

--fUYQa+Pmc3FrFX/N--

Followup 4

Date: Sun, 18 Apr 2010 21:04:23 +0200
From: Rafal Szczesniak <mimir@samba.org>
To: Howard Chu <hyc@symas.com>
Cc: openldap-its@openldap.org
Subject: Re: (ITS#6225) GSSAPI support for client library (fixes)

--LZvS9be/3tNcYl/X
Content-Type: text/plain; charset=iso-8859-2
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Howard,

On Fri, Jul 24, 2009 at 09:20:46PM -0700, Howard Chu wrote:
> mimir@samba.org wrote:
> >Full_Name: Rafal Szczesniak
> >Version: Stable (2.4.16)
> >OS: GNU/Linux
> >URL: http://www.samba.org/~mimir/gssapi-bugfix.diff
> >Submission from: (NULL) (67.51.54.234)
> >
> >
> >This is a bugfix patch for OpenLDAP's gssapi support.
> >
> One of these patches appears to duplicate ITS#6092. As the original
> author of this code, could you also take a look at #6091 and #6093?

I'm really sorry but after I looked at current code in HEAD and I thought I=
 liked it
(the actual issue was fixed), following with this thread completely went of=
f my radar.
I've found it while looking through my mailbox.

The last chunk of this its' patch still applies though. It's a minor thing =
but fixes
potential memory leak. I can open a separate ITS for it if you like.

As for the other patches - #6091 is (was) convenient but not absolutely nec=
essary
and #6093 is interesting but I'm not sure if it isn's a bit too much. If yo=
u're connecting
invalid (from kerberos point of view) hostname then, well, find out what's =
the correct=20
hostname first.

This its # can be closed of course.


cheers,
--=20
Rafal Szczesniak
Samba Team member   http://www.samba.org
Likewise Software   http://www.likewise.com


--LZvS9be/3tNcYl/X
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iD8DBQFLy1e3Hvdfyv3qiKkRAk7ZAJ0VPkzc89VAxXh/AF4EZVCJTvS/fgCfeZK7
TULoTjp8aXQkK0oGZNShxsY=
=zucU
-----END PGP SIGNATURE-----

--LZvS9be/3tNcYl/X--