[NFS-Ganesha-Devel] Re: Kerberos Progress
On 10/29/19 7:58 PM, Frank Filz wrote:
I made some progress on the Kerberos stuff.
For Integrity, Daniel’s fix didn’t quite work because it didn’t account
for the length of the mic token length field…
Instead of doing a SETPOS, I fixed up the xdrs directly with the tail of
the last buffer.
I also re-organized the xdr_iov for XDR_ALLOCHDR to explicitly have a
buffer for the length field (which is not part of the gss_iov). This
makes the debug code work better.
Now krb5 and krb5i work, but krb5p doesn’t work, so a bit more debug to
figure out what’s wrong there. I suspect a similar problem with the
length of the output, but it needs to be fixed up a little differently.
Frank
Yeah, this gets you back to the fix I had at Bakeathon. It used the
tail, too, but didn't account for multiple buffers (and so didn't work
for krb5p).
Daniel