2011-06-29 18:46:14

by Kevin Coffman

Subject: [PATCH] Add requirement for newer libgssglue for svcgssd -n option

SNAFU. This came to my attention minutes after 1.2.4 was
released...

Changes in commit d6c1b35c require that gss_acquire_cred()
is now called when the "-n" option is used. This requires an
updated libgssglue which properly handles name GSS_C_NO_NAME
as input to gss_import_name()/gss_acquire_cred().

Add a requirement for the newer version.

Without the newer libgssglue, when svcgssd is started with "-n"
you will see the error message, "ERROR: GSS-API: error in
gss_acquire_cred(): GSS_S_BAD_NAME (An invalid name was supplied)
- Unknown error"
---

aclocal/rpcsec_vers.m4 | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/aclocal/rpcsec_vers.m4 b/aclocal/rpcsec_vers.m4
index 25902ca..8218372 100644
--- a/aclocal/rpcsec_vers.m4
+++ b/aclocal/rpcsec_vers.m4
@@ -1,7 +1,7 @@
dnl Checks librpcsec version
AC_DEFUN([AC_RPCSEC_VERSION], [

- PKG_CHECK_MODULES([GSSGLUE], [libgssglue >= 0.1])
+ PKG_CHECK_MODULES([GSSGLUE], [libgssglue >= 0.3])

dnl TI-RPC replaces librpcsecgss
if test "$enable_tirpc" = no; then

2011-06-30 00:38:03

by Kevin Coffman

Subject: Re: [PATCH] Add requirement for newer libgssglue for svcgssd -n option

On Wed, Jun 29, 2011 at 2:37 PM, Kevin Coffman <[email protected]> wrote:
> SNAFU. ?This came to my attention minutes after 1.2.4 was
> released...
>
> Changes in commit d6c1b35c require that gss_acquire_cred()
> is now called when the "-n" option is used. ?This requires an
> updated libgssglue which properly handles name GSS_C_NO_NAME
> as input to gss_import_name()/gss_acquire_cred().
>
> Add a requirement for the newer version.
>
> Without the newer libgssglue, when svcgssd is started with "-n"
> you will see the error message, "ERROR: GSS-API: error in
> gss_acquire_cred(): GSS_S_BAD_NAME (An invalid name was supplied)
> - Unknown error"
> ---
>
> ?aclocal/rpcsec_vers.m4 | ? ?2 +-
> ?1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/aclocal/rpcsec_vers.m4 b/aclocal/rpcsec_vers.m4
> index 25902ca..8218372 100644
> --- a/aclocal/rpcsec_vers.m4
> +++ b/aclocal/rpcsec_vers.m4
> @@ -1,7 +1,7 @@
> ?dnl Checks librpcsec version
> ?AC_DEFUN([AC_RPCSEC_VERSION], [
>
> - ?PKG_CHECK_MODULES([GSSGLUE], [libgssglue >= 0.1])
> + ?PKG_CHECK_MODULES([GSSGLUE], [libgssglue >= 0.3])
>
> ? dnl TI-RPC replaces librpcsecgss
> ? if test "$enable_tirpc" = no; then
>

I just realized that I failed to add a Signed-off-by: in both patches
I sent today. Let me know if you need me to resend them...

K.C.

2011-06-30 15:24:25

by Steve Dickson

Subject: Re: [PATCH] Add requirement for newer libgssglue for svcgssd -n option

On 06/29/2011 02:37 PM, Kevin Coffman wrote:
> SNAFU. This came to my attention minutes after 1.2.4 was
> released...
>
> Changes in commit d6c1b35c require that gss_acquire_cred()
> is now called when the "-n" option is used. This requires an
> updated libgssglue which properly handles name GSS_C_NO_NAME
> as input to gss_import_name()/gss_acquire_cred().
>
> Add a requirement for the newer version.
>
> Without the newer libgssglue, when svcgssd is started with "-n"
> you will see the error message, "ERROR: GSS-API: error in
> gss_acquire_cred(): GSS_S_BAD_NAME (An invalid name was supplied)
> - Unknown error"
> ---
Committed.. Unfortunately post 1.2.4 release...

steved.

>
> aclocal/rpcsec_vers.m4 | 2 +-
> 1 files changed, 1 insertions(+), 1 deletions(-)
>
> diff --git a/aclocal/rpcsec_vers.m4 b/aclocal/rpcsec_vers.m4
> index 25902ca..8218372 100644
> --- a/aclocal/rpcsec_vers.m4
> +++ b/aclocal/rpcsec_vers.m4
> @@ -1,7 +1,7 @@
> dnl Checks librpcsec version
> AC_DEFUN([AC_RPCSEC_VERSION], [
>
> - PKG_CHECK_MODULES([GSSGLUE], [libgssglue >= 0.1])
> + PKG_CHECK_MODULES([GSSGLUE], [libgssglue >= 0.3])
>
> dnl TI-RPC replaces librpcsecgss
> if test "$enable_tirpc" = no; then
>