Issue 6225 - GSSAPI support for client library (fixes)
Summary: GSSAPI support for client library (fixes)
Status: VERIFIED INVALID
Alias: None
Product: OpenLDAP
Classification: Unclassified
Component: slapd (show other issues)
Version: unspecified
Hardware: All All
: --- normal
Target Milestone: ---
Assignee: OpenLDAP project
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-07-22 18:49 UTC by mimir@samba.org
Modified: 2020-09-01 19:54 UTC (History)
0 users

See Also:


Attachments
gssapi-bugfix.diff (4.88 KB, text/plain)
2020-08-29 00:10 UTC, Quanah Gibson-Mount
Details

Note You need to log in before you can comment on or make changes to this issue.
Description mimir@samba.org 2009-07-22 18:49:16 UTC
Full_Name: Rafal Szczesniak
Version: Stable (2.4.16)
OS: GNU/Linux
URL: http://www.samba.org/~mimir/gssapi-bugfix.diff
Submission from: (NULL) (67.51.54.234)


This is a bugfix patch for OpenLDAP's gssapi support.
Comment 1 Howard Chu 2009-07-25 04:20:46 UTC
mimir@samba.org wrote:
> Full_Name: Rafal Szczesniak
> Version: Stable (2.4.16)
> OS: GNU/Linux
> URL: http://www.samba.org/~mimir/gssapi-bugfix.diff
> Submission from: (NULL) (67.51.54.234)
>
>
> This is a bugfix patch for OpenLDAP's gssapi support.
>
One of these patches appears to duplicate ITS#6092. As the original author of 
this code, could you also take a look at #6091 and #6093?

-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/

Comment 2 mikbec@web.de 2009-07-29 18:53:51 UTC
hyc@symas.com wrote:
> mimir@samba.org wrote:
>> Full_Name: Rafal Szczesniak
>> Version: Stable (2.4.16)
>> OS: GNU/Linux
>> URL: http://www.samba.org/~mimir/gssapi-bugfix.diff
>> Submission from: (NULL) (67.51.54.234)
>>
>>
>> This is a bugfix patch for OpenLDAP's gssapi support.
>>
> One of these patches appears to duplicate ITS#6092. As the original author of 
> this code, could you also take a look at #6091 and #6093?
> 
Yes, I think this patch tries to resolve the same problem like #6093 but
with a different approach. And after some discussion with Hallvard B
Furuseth about the guess_service_principal() string problem (#6223) I
have sent a all-in-one-patch which results in #6110.

best regards
   mike

Comment 3 mimir@samba.org 2009-08-15 11:07:58 UTC
On Fri, Jul 24, 2009 at 09:20:46PM -0700, Howard Chu wrote:
> mimir@samba.org wrote:
>> Full_Name: Rafal Szczesniak
>> Version: Stable (2.4.16)
>> OS: GNU/Linux
>> URL: http://www.samba.org/~mimir/gssapi-bugfix.diff
>> Submission from: (NULL) (67.51.54.234)
>>
>>
>> This is a bugfix patch for OpenLDAP's gssapi support.
>>
> One of these patches appears to duplicate ITS#6092. As the original 
> author of this code, could you also take a look at #6091 and #6093?

Yes, will do. Sorry about late reply, but first I was travelling and then
I went for a holidays.


cheers,
-- 
Rafal Szczesniak
Samba Team member   http://www.samba.org
Likewise Software   http://www.likewise.com

Comment 4 mimir@samba.org 2010-04-18 19:04:23 UTC
Howard,

On Fri, Jul 24, 2009 at 09:20:46PM -0700, Howard Chu wrote:
> mimir@samba.org wrote:
> >Full_Name: Rafal Szczesniak
> >Version: Stable (2.4.16)
> >OS: GNU/Linux
> >URL: http://www.samba.org/~mimir/gssapi-bugfix.diff
> >Submission from: (NULL) (67.51.54.234)
> >
> >
> >This is a bugfix patch for OpenLDAP's gssapi support.
> >
> One of these patches appears to duplicate ITS#6092. As the original
> author of this code, could you also take a look at #6091 and #6093?

I'm really sorry but after I looked at current code in HEAD and I thought I liked it
(the actual issue was fixed), following with this thread completely went off my radar.
I've found it while looking through my mailbox.

The last chunk of this its' patch still applies though. It's a minor thing but fixes
potential memory leak. I can open a separate ITS for it if you like.

As for the other patches - #6091 is (was) convenient but not absolutely necessary
and #6093 is interesting but I'm not sure if it isn's a bit too much. If you're connecting
invalid (from kerberos point of view) hostname then, well, find out what's the correct 
hostname first.

This its # can be closed of course.


cheers,
-- 
Rafal Szczesniak
Samba Team member   http://www.samba.org
Likewise Software   http://www.likewise.com

Comment 5 Quanah Gibson-Mount 2017-04-07 17:41:55 UTC
moved from Incoming to Software Bugs
Comment 6 Quanah Gibson-Mount 2020-08-29 00:10:04 UTC
Created attachment 758 [details]
gssapi-bugfix.diff
Comment 7 Quanah Gibson-Mount 2020-08-29 00:10:36 UTC
Need to check the last bit here about the potential memory leak fix
Comment 8 Quanah Gibson-Mount 2020-09-01 19:54:06 UTC
Superceded by Issue#6567