[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: cvs and heimdal
Brian May <firstname.lastname@example.org> writes:
> 0.1l fixes the above problem. I had to reapply this patch though to
> get around the problem I previously reported where my tickets have
> already expired when I just got them:
That shouldn't really be necessary. I think you still have old
principals which have a maximum life of `0' left around.
> > cvs produces the same error, but I didn't expect much since I don't have
> > a valid ticket.
> Same problem. I tried recompiling CVS just in case that help, but
> no difference.
Ok, try the appended patch to CVS and see if it's able to tell you
more when it fails.
RCS file: /home2/cvsroot/ccvs/src/client.c,v
retrieving revision 1.269
diff -u -w -u -w -r1.269 client.c
--- client.c 1999/04/06 18:31:39 1.269
+++ client.c 1999/08/04 06:24:34
@@ -4184,12 +4184,20 @@
if (stat_maj != GSS_S_COMPLETE && stat_maj != GSS_S_CONTINUE_NEEDED)
+ OM_uint32 new_stat_min;
message_context = 0;
- gss_display_status (&stat_min, stat_maj, GSS_C_GSS_CODE,
+ gss_display_status (&new_stat_min, stat_maj, GSS_C_GSS_CODE,
GSS_C_NULL_OID, &message_context, &tok_out);
+ error (0, 0, "GSSAPI authentication failed: %s",
+ (char *) tok_out.value);
+ message_context = 0;
+ gss_display_status (&new_stat_min, stat_min, GSS_C_MECH_CODE,
+ GSS_C_NULL_OID, &message_context, &tok_out);
error (1, 0, "GSSAPI authentication failed: %s",
(char *) tok_out.value);
if (tok_out.length == 0)
> > Some other comments:
> 0. I got rsh to work.
> My /etc/inetd.conf entry is I have hacked together looks like:
> kshell stream tcp nowait root /usr/sbin/tcpd /usr/local/lib/heimdal/libexec/rshd -k -x
You actually don't need to use `-x' here. That flag is only needed
when acting as v4 rshd and then on the `ekshell' port.