Subject: libauthen-krb5-perl: TGTs should be requested 'forwardable'
Package: libauthen-krb5-perl
Version: 1.6-2
Severity: wishlist

*** Please type your report below this line ***

Hi,

it would be nice having libauthen-krb5-perl fetch 'forwardable' TGTs
by default or to make TGT flags optional. Otherwise it's impossible to use
libauthen-krb5-perl-fetched TGTs for e.g. authentication over ssh.

This is a patch making fetched TGTs (hardcoded) 'forwardable':

--- Krb5.xs.old 2006-06-11 18:37:01.000000000 +0200
+++ Krb5.xs     2006-10-02 17:57:42.000000000 +0200
@@ -331,7 +331,7 @@
        cr.times.endtime = now + KRB5_DEFAULT_LIFE;
        cr.times.renew_till = 0;
 
-       err = krb5_get_in_tkt_with_password(context, 0, 0, NULL, NULL,
+       err = krb5_get_in_tkt_with_password(context, TKT_FLG_FORWARDABLE, 0, 
NULL, NULL,
                password, cc, &cr, 0);
 
        if (err) XSRETURN_UNDEF;
@@ -358,7 +358,7 @@
        cr.times.endtime = now + KRB5_DEFAULT_LIFE;
        cr.times.renew_till = 0;
 
-       err = krb5_get_in_tkt_with_keytab(context, 0, 0, NULL, NULL,
+       err = krb5_get_in_tkt_with_keytab(context, TKT_FLG_FORWARDABLE, 0, 
NULL, NULL,
                keytab, cc, &cr, 0);
 
        if (err) XSRETURN_UNDEF;


Regards,

Frank

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18.0-f3
Locale: LANG=de_DE, LC_CTYPE=de_DE (charmap=ISO-8859-1) (ignored: LC_ALL set to 
de_DE)

Versions of packages libauthen-krb5-perl depends on:
ii  libc6                        2.3.6.ds1-4 GNU C Library: Shared libraries
ii  libcomerr2                   1.39-1      common error description library
ii  libkrb53                     1.4.4-3     MIT Kerberos runtime libraries
ii  perl                         5.8.8-6.1   Larry Wall's Practical Extraction 
ii  perl-base [perlapi-5.8.8]    5.8.8-6.1   The Pathologically Eclectic Rubbis

libauthen-krb5-perl recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to