gssproxy

#65 gss_krb5_set_allowable_enctypes fails in GSSPROXY_BEHAVIOR=REMOTE_ONLY|REMOTE_FIRST
Closed: Fixed Opened by gd.

Closed: Fixed
Reopen Issue

When nfs-utils' gssd calls gss_set_allowable_enctypes, this happens:

gss_set_allowable_enctypes->gss_krb5_set_allowable_enctypes->gss_set_cred_option->"mech->gssspi_set_cred_option"->gssi_set_cred_option always returns GSS_S_UNAVAILABLE for non local creds.

This causes the context setup to fail completely.

This is because currently the protocol does not support setting enctypes remotely.

I've added a protocol extension to the protocol reference page here:
https://fedorahosted.org/gss-proxy/wiki/ProtocolDocumentation

Testing initial implementation.

Fixed in:
f71e3dc
39dfe57

Metadata Update from @gd:
- Issue assigned to simo
- Issue set to the milestone: 2013 March
Metadata
None
None
None
Normal
task
mechglue interface
0
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.