Date: Tue, 6 Sep 2011 15:55:36 +0000 (UTC) From: Cy Schubert <cy@FreeBSD.org> To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: ports/security/krb5 Makefile ports/security/krb5/files patch-lib-rpc-clnt_tcp.c Message-ID: <201109061555.p86Ftagt087559@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
cy 2011-09-06 15:55:36 UTC
FreeBSD ports repository
Modified files:
security/krb5 Makefile
Added files:
security/krb5/files patch-lib-rpc-clnt_tcp.c
Log:
Apply patch from MIT KRB5 GIT tree commit: 043533c2f13d2bc69316.
libgssrpc was ignorant of the remote address of the kadmin socket,
even when it's IPv4. This made old-style GSSAPI authentication fail
because it uses the wrong channel bindings. Fix this problem by making
clnttcp_create() get the remote address from the socket using getpeername()
if the caller doesn't provide it and it's an IPv4 address.
PR: 160500
Submitted by: Ben Kaduk <kaduk@mit.edu>
Revision Changes Path
1.152 +1 -0 ports/security/krb5/Makefile
1.1 +21 -0 ports/security/krb5/files/patch-lib-rpc-clnt_tcp.c (new)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201109061555.p86Ftagt087559>