[PATCH 8/9] kerberos: Don't include GSS_C_DCE_STYLE in default gss_init_sec_context() flags.
Dmitry Timoshkov
dmitry at baikal.ru
Thu Jan 25 05:39:02 CST 2018
Hans Leidekker <hans at codeweavers.com> wrote:
> > static ULONG flags_isc_req_to_gss( ULONG flags )
> > {
> > - ULONG ret = GSS_C_DCE_STYLE;
> > + ULONG ret = 0;
> > if (flags & ISC_REQ_DELEGATE) ret |= GSS_C_DELEG_FLAG;
> > if (flags & ISC_REQ_MUTUAL_AUTH) ret |= GSS_C_MUTUAL_FLAG;
> > if (flags & ISC_REQ_REPLAY_DETECT) ret |= GSS_C_REPLAY_FLAG;
>
> This breaks my tests:
>
> 0009:trace:secur32:EncryptMessage 0x32fca0 0 0x32fc64 0
> 0009:trace:secur32:lsa_EncryptMessage 0x1307f8 0 0x32fc64 0)
> 0009:trace:kerberos:kerberos_SpSealMessage (7cef1cb8 0x00000000 0x32fc64 0)
> 0009:trace:kerberos:kerberos_SpSealMessage gss_wrap_iov returned 000d0000 minor status 00000016
> 0009:fixme:kerberos:status_gss_to_sspi couldn't convert status 0x000d0000 to SECURITY_STATUS
> kerberos.c:309: Test failed: got 80090304
> kerberos.c:312: Test failed: wrong data
> kerberos.c:315: Test failed: got 12000
> kerberos.c:316: Test failed: buffer not modified
Could you please provide the test sources along with the following log:
KRB5_TRACE=/dev/stdout WINEDEBUG=+secur32 wine yourtest.exe
with the attached patch applied?
Also how are you testing kerberos SSP/AP? With my secur32 patches
from the queue or something else?
--
Dmitry.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-kerberos-Print-verbose-traces-on-gssapi-failures.patch
Type: text/x-patch
Size: 5322 bytes
Desc: not available
URL: <http://www.winehq.org/pipermail/wine-devel/attachments/20180125/8599de6d/attachment-0001.bin>
More information about the wine-devel
mailing list