[PATCH 8/9] kerberos: Don't include GSS_C_DCE_STYLE in default gss_init_sec_context() flags.

Dmitry Timoshkov dmitry at baikal.ru
Thu Jan 25 05:39:02 CST 2018


Hans Leidekker <hans at codeweavers.com> wrote:

> >  static ULONG flags_isc_req_to_gss( ULONG flags )
> >  {
> > -    ULONG ret = GSS_C_DCE_STYLE;
> > +    ULONG ret = 0;
> >      if (flags & ISC_REQ_DELEGATE)        ret |= GSS_C_DELEG_FLAG;
> >      if (flags & ISC_REQ_MUTUAL_AUTH)     ret |= GSS_C_MUTUAL_FLAG;
> >      if (flags & ISC_REQ_REPLAY_DETECT)   ret |= GSS_C_REPLAY_FLAG;
> 
> This breaks my tests:
> 
> 0009:trace:secur32:EncryptMessage 0x32fca0 0 0x32fc64 0
> 0009:trace:secur32:lsa_EncryptMessage 0x1307f8 0 0x32fc64 0)
> 0009:trace:kerberos:kerberos_SpSealMessage (7cef1cb8 0x00000000 0x32fc64 0)
> 0009:trace:kerberos:kerberos_SpSealMessage gss_wrap_iov returned 000d0000 minor status 00000016
> 0009:fixme:kerberos:status_gss_to_sspi couldn't convert status 0x000d0000 to SECURITY_STATUS
> kerberos.c:309: Test failed: got 80090304
> kerberos.c:312: Test failed: wrong data
> kerberos.c:315: Test failed: got 12000
> kerberos.c:316: Test failed: buffer not modified

Could you please provide the test sources along with the following log:
KRB5_TRACE=/dev/stdout WINEDEBUG=+secur32 wine yourtest.exe

with the attached patch applied?

Also how are you testing kerberos SSP/AP? With my secur32 patches
from the queue or something else?

-- 
Dmitry.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-kerberos-Print-verbose-traces-on-gssapi-failures.patch
Type: text/x-patch
Size: 5322 bytes
Desc: not available
URL: <http://www.winehq.org/pipermail/wine-devel/attachments/20180125/8599de6d/attachment-0001.bin>


More information about the wine-devel mailing list