RE: gss_init_sec_context with delegated_cred_handle error

2015-04-07 Thread Xie, Hugh
Thanks. Will upgrade to 1.11 -Original Message- From: Greg Hudson [mailto:ghud...@mit.edu] Sent: Tuesday, April 07, 2015 11:56 AM To: Xie, Hugh Subject: Re: gss_init_sec_context with delegated_cred_handle error On 04/07/2015 08:32 AM, Xie, Hugh wrote: > Will gss_acquire_c

RE: gss_init_sec_context with delegated_cred_handle error

2015-04-07 Thread Xie, Hugh
, Hugh Sent: Monday, October 27, 2014 12:18 PM To: Greg Hudson; Subject: RE: gss_init_sec_context with delegated_cred_handle error Thanks. Setting KRB5_CLIENT_KTNAME and setting KRB5CCNAME to a none default location resolve the issue. -Original Message- From: Greg Hudson [mailto:ghud

RE: gss_init_sec_context with delegated_cred_handle error

2014-10-27 Thread Xie, Hugh
Thanks. Setting KRB5_CLIENT_KTNAME and setting KRB5CCNAME to a none default location resolve the issue. -Original Message- From: Greg Hudson [mailto:ghud...@mit.edu] Sent: Monday, October 27, 2014 11:21 AM To: Xie, Hugh; Subject: Re: gss_init_sec_context with delegated_cred_handle

Re: gss_init_sec_context with delegated_cred_handle error

2014-10-27 Thread Greg Hudson
On 10/23/2014 11:38 AM, Xie, Hugh wrote: > When I pass GSS_C_NO_CREDENTIAL as cred_handle to gss_init_sec_context(), I > got no error. But when I pass delegated_cred_handle (output from > gss_accept_sec_context) as cred_handle to gss_init_sec_context(), I got > 'Matching credential not found' er

RE: gss_init_sec_context with delegated_cred_handle error

2014-10-27 Thread Xie, Hugh
I think the delegated_cred_handle output from gss_accept_sec_context, has principal in lower case. When delegated_cred_handle passed to gss_init_sec_context the default principal of the krbtgt is in upper case causing the "Matching credential not found" error. Can I report this as a bug?

RE: gss_init_sec_context with delegated_cred_handle error

2014-10-23 Thread Xie, Hugh
The mailing server mess up the string of the principal into email Here is uppercase principal "USERID @ MY.DOMAIN.COM" and the lower case principal is "userid @ my.domain.com" From: Xie, Hugh Sent: Thursday, October 23, 2014 11:39 AM To: Subject: gss_init_sec_context with delegated_cred_handle