[Dovecot] [PATCH] GSSAPI authorization and virtual users

Sam Morris sam at robots.org.uk
Tue Mar 6 20:12:01 EET 2012


On Mon, 2012-03-05 at 20:52 +0200, Timo Sirainen wrote:
> On 5.3.2012, at 20.45, Sam Morris wrote:
> 
> >     3. The credentials lookup triggers an info log message saying that
> >        credentials for GSSAPI were requested, "but we have only (e.g.)
> >        MD5-CRYPT". The authplugin doesn't actually want the credential,
> >        but I think that the only way the authplugin can trigger a
> >        passdb lookup is by requesting it.
> 
> I'll look at the rest more closely later, but this should be an easy fix: request "" instead of "GSSAPI".

Thanks for pointing that out. Here's a newer version of the patch with
that change. I also realised that the gss_buffer is not required in the
code that runs once the passdb lookup is complete, so I removed the code
that stashes it in struct gssapi_auth_request.

Regards,

-- 
Sam Morris <sam at robots.org.uk>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: k5principals_2.patch
Type: text/x-patch
Size: 6020 bytes
Desc: not available
URL: <http://dovecot.org/pipermail/dovecot/attachments/20120306/e17f0990/attachment-0004.bin>


More information about the dovecot mailing list