[PATCH] support for MIT Kerberos 1.2 for HTTP Negotiate Authentication

Karsten Künne kuenne at rentec.com
Wed Sep 15 04:57:12 BST 2004


I tested the negotiate authentication in the http kioslave with MIT Kerberos 
1.2 (1.2.8 to be exact) and I had to make only a small change to make it 
work. Following is the patch against KDE 3.3.0 (this is also a better fix for 
bug 86019):

--- http.cc.orig        2004-09-13 19:15:21.000000000 -0400
+++ http.cc     2004-09-14 23:39:40.000000000 -0400
@@ -78,7 +78,8 @@

 // Catch uncompatible crap (BR86019)
 #if defined(GSS_RFC_COMPLIANT_OIDS) && (GSS_RFC_COMPLIANT_OIDS == 0)
-#undef HAVE_LIBGSSAPI
+#include <gssapi/gssapi_generic.h>
+#define GSS_C_NT_HOSTBASED_SERVICE gss_nt_service_name
 #endif

 #endif /* HAVE_LIBGSSAPI */


It compiled and worked fine with a self-installed MIT Kerberos 1.2.8 on a SUSE 
9.0 system and it doesn't break compatibility with MIT Kerberos 1.3 or 
Heimdal as these Kerberos implementations don't define the 
GSS_RFC_COMPLIANT_OIDS crap. If somebody could please put that into CVS.


Karsten.
-- 
"For that matter, compare your pocket computer with the massive jobs of
a thousand years ago.  Why not, then, the last step of doing away with
computers altogether?"
		-- Jehan Shuman
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <https://mail.kde.org/mailman/private/kfm-devel/attachments/20040914/1b72f8ae/attachment.sig>


More information about the kfm-devel mailing list