RE: Not getting delegation credential from gss_accept_sec_context()

2014-10-08 Thread Xie, Hugh
We are using version 1.9.1. When I turn on backback in debugger, I see the gss_accept_sec_context was in turn called internally inside spnego_mech.c that pass a NULL verifier_cred_handle krb5_gss_accept_sec_context_ext. Anyway I can resolve this issue? Here are the full backtrace: (gdb)

Re: Not getting delegation credential from gss_accept_sec_context()

2014-10-08 Thread Greg Hudson
On 10/08/2014 10:29 AM, Xie, Hugh wrote: We are using version 1.9.1. When I turn on backback in debugger, I see the gss_accept_sec_context was in turn called internally inside spnego_mech.c that pass a NULL verifier_cred_handle krb5_gss_accept_sec_context_ext. Anyway I can resolve this

RE: Not getting delegation credential from gss_accept_sec_context()

2014-10-08 Thread Xie, Hugh
Switched to 1.12 resolved this issue. Thanks. -Original Message- From: kerberos-boun...@mit.edu [mailto:kerberos-boun...@mit.edu] On Behalf Of Xie, Hugh Sent: Wednesday, October 08, 2014 10:30 AM To: Kerberos@mit.edu; Greg Hudson Subject: RE: Not getting delegation credential from

RE: Not getting delegation credential from gss_accept_sec_context()

2014-10-08 Thread Xie, Hugh
After switching version 1.12.2, as a follow up question to the next step of S4U2Proxy. I passed the delegated_cred_handle from *gss_accept_sec_context()* to *gss_init_sec_context*. I got a No context has been established error since the context_handle is reinitialized to GSS_C_NO_CONTEXT. This

Re: Not getting delegation credential from gss_accept_sec_context()

2014-10-08 Thread Greg Hudson
On 10/08/2014 03:41 PM, Xie, Hugh wrote: After switching version 1.12.2, as a follow up question to the next step of S4U2Proxy. I passed the delegated_cred_handle from *gss_accept_sec_context()* to *gss_init_sec_context*. I got a No context has been established error since the

RE: Not getting delegation credential from gss_accept_sec_context()

2014-10-08 Thread Xie, Hugh
That was what I did. Both context_handle for *gss_accept_sec_context()* and then * gss_init_sec_context* were initialized to GSS_C_NO_CONTEXT and the address of context_handle are passed to these functions. I am getting error No context has been established and Attempt to use incomplete

RE: Not getting delegation credential from gss_accept_sec_context()

2014-10-08 Thread Xie, Hugh
My mistake. The error is from * gss_inquire_context(min_stat, state-context, gssuser, NULL, NULL, NULL, NULL, NULL, NULL);* post call to * gss_init_sec_context*. Can I still call this function post gss_init_sec_context with delegate handle? -Original Message- From:

Re: Not getting delegation credential from gss_accept_sec_context()

2014-10-08 Thread Greg Hudson
On 10/08/2014 05:45 PM, Xie, Hugh wrote: My mistake. The error is from * gss_inquire_context(min_stat, state-context, gssuser, NULL, NULL, NULL, NULL, NULL, NULL);* post call to * gss_init_sec_context*. Can I still call this function post gss_init_sec_context with delegate handle? Our