search for: cleartoken

..._pioctl() returns -1 and "errno" returns an error code ENOTCONN for _all_ tokens it finds if there is an expired token present. The loop has to continue in this case although the _data_ returned by k_pioctl() is invalid. This invalidness can be checked by comparing the length of the "ClearToken" component with the size of the ClearToken struct. In OpenSSH-3.4p1 this condition is checked in sshconnect1.c line 814. But it is wrong to "break" out of the loop because of this condition. Jumping to the next token is the correct behavior. "errno" returns "EDOM"...

...e for the bug: The problem is that k_pioctl() returns error code ENOTCONN for _all_ tokens it finds if there is an expired token present. The loop has to continue in this case although the _data_ returned by k_pioctl() is invalid. This invalidness can be checked by comparing the length of the "ClearToken" component with the size of the ClearToken struct. In OpenSSH-3.4p1 this condition is checked in sshconnect1.c line 814. But it is wrong to "break" out of the loop because of this condition. Jumping to the next token is the correct behavior. I have attached a (not nicely formatted)...

...4=/afs/eos.dk/sw/pack/krb4-1.0.3 --with-afs --with-ssl-dir=/afs/eos.dk/sw/pack/openssl-0.9.6 To make it compile, I have to add the patch below to make sshconnect1.c line 546 compile. It states: void send_afs_tokens(void) { CREDENTIALS creds; struct ViceIoctl parms; struct ClearToken ct; int i, type, len, plen; char buf[2048], *p, *server_cell; char buffer[8192]; /* Move over ktc_GetToken, here's something leaner. */ for (i = 0; i < 100; i++) { /* just in case */ parms.in = (char *) &i; parm...