search for: gss_import_name

.../Version: Linux Status: NEW Severity: normal Priority: P2 Component: ssh AssignedTo: bitbucket at mindrot.org ReportedBy: eyal.lotem at gmail.com The option "CheckHostIP no" cancels ssh's lookup, but the ssh clinet still calls gss_import_name with the parameter GSS_C_NT_HOSTBASED_SERVICE. This call creates a name lookup internally (via gss's call to krb5_sname_to_principal). This causes "ssh" to always attempt to backresolve IP addresses. It only gives up after about 10 seconds. This means that all ssh-based traffic (ssh,...

Dear all, I am trying to setup Dovecot with GSSAPI support. For testing purposes gssapi is the only method allowed for login. As I cannot login to my mailbox, I'vo got two questions about the following log entries: dovecot: Info: auth-worker(default): passwd-file /dovecot/store/db/test-userdb: Read 3 users dovecot: Info: auth(default): new auth connection: pid=3915 dovecot: Info:

...incipal_name, request->set->gssapi_hostname); auth_request_log_debug(request, "gssapi", "Obtaining credentials for %s", str_c(principal_name)); inbuf.length = str_len(principal_name); inbuf.value = str_c_modifiable(principal_name); major_status = gss_import_name(&minor_status, &inbuf, GSS_C_NT_HOSTBASED_SERVICE, &gss_principal); ********************************* So, according to source code, Dovecot tries to find in krb5.keytab a principal named "imap at hostname". However wiki says to cr...

I have error while compiling dovecot with GSSAPI under FreeBSD 6.2: Is this dovecot-related or not? cc -std=gnu99 -O2 -fno-strict-aliasing -pipe -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -o dovecot-auth auth.o auth-cache.o auth-client-connection.o auth-master-connection.o auth-master-listener.o auth-module.o

...0x0000000083442f30 0x0 + 2202283824 #7 7 libsystem_c.dylib 0x00007fff82d45f13 __memcpy_chk + 22 #8 8 libgssapi-samba4.dylib 0x0000000101ab5d06 _gss_copy_oid + 150 #9 9 libgssapi-samba4.dylib 0x0000000101ab89e3 gss_import_name + 259 #10 10 libads-samba4.dylib 0x0000000102b58677 ads_generate_service_principal + 359 #11 11 libads-samba4.dylib 0x0000000102b57bde ads_sasl_spnego_bind + 974 #12 12 libads-samba4.dylib 0x0000000102b5761a ads_sasl_bind + 650 #13 13...

...host */ +OM_uint32 +ssh_gssapi_import_name(Gssctxt *ctx, const char *host) +{ + gss_buffer_desc gssbuf; + + gssbuf.length = sizeof("host@") + strlen(host); + gssbuf.value = xmalloc(gssbuf.length); + snprintf(gssbuf.value, gssbuf.length, "host@%s", host); + + if ((ctx->major = gss_import_name(&ctx->minor, + &gssbuf, GSS_C_NT_HOSTBASED_SERVICE, &ctx->name))) + ssh_gssapi_error(ctx); + + xfree(gssbuf.value); + return (ctx->major); +} + +/* Acquire credentials for a server running on the current host. + * Requires that the context structure contains a valid OID +...

If I am trying to build OpenSSH 6.6 with Kerberos GSSAPI support, do I still need to get Simon Wilkinson's patches? --- Scott Neugroschl | XYPRO Technology Corporation 4100 Guardian Street | Suite 100 |Simi Valley, CA 93063 | Phone 805 583-2874|Fax 805 583-0124 |

....c Compiling heimdal/lib/gssapi/mech/gss_encapsulate_token.c Compiling heimdal/lib/gssapi/mech/gss_get_mic.c Compiling heimdal/lib/gssapi/mech/gss_import_sec_context.c Compiling heimdal/lib/gssapi/mech/gss_inquire_cred.c Compiling heimdal/lib/gssapi/mech/gss_wrap.c Compiling heimdal/lib/gssapi/mech/gss_import_name.c Compiling heimdal/lib/gssapi/mech/gss_duplicate_name.c Compiling heimdal/lib/gssapi/mech/gss_unwrap.c Compiling heimdal/lib/gssapi/mech/gss_export_sec_context.c Compiling heimdal/lib/gssapi/mech/gss_inquire_context.c heimdal/lib/gssapi/mech/gss_inquire_context.c: In function ?gss_inquire_context?...