Package: libapache2-mod-auth-kerb Version: 5.4-2 Severity: normal Tags: upstream patch
Hi, When KrbSaveCredentials is enabled, requests on a keep-alive connection, after the first one, will not have the $KRB5CCNAME environment variable set. This bug is described in Fedora: https://bugzilla.redhat.com/show_bug.cgi?id=687975 Fedora includes mod_auth_kerb-5.4-delegation.patch to fix this issue: https://apps.fedoraproject.org/packages/mod_auth_kerb/sources/patches/ Note that this patch included in Fedora is an improvement over the one originally attached to the Fedora bug report. I tested the patch and could no longer reproduce this bug on Debian wheezy (Apache 2.2). It might also be useful to move the credentials cache under /run/apache2 instead of /tmp, similar to what Fedora has done in another patch: mod_auth_kerb-5.4-cachedir.patch. Thanks, Dara -- System Information: Debian Release: 7.1 APT prefers stable-updates APT policy: (500, 'stable-updates'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 3.2.0-4-amd64 (SMP w/16 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages libapache2-mod-auth-kerb depends on: ii apache2.2-common 2.2.22-13 ii krb5-config 2.3 ii libc6 2.13-38 ii libcomerr2 1.42.5-1.1 ii libgssapi-krb5-2 1.10.1+dfsg-5+deb7u1 ii libk5crypto3 1.10.1+dfsg-5+deb7u1 ii libkrb5-3 1.10.1+dfsg-5+deb7u1 libapache2-mod-auth-kerb recommends no packages. libapache2-mod-auth-kerb suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
