[Bug 1073] if userok rejects a user their creds still get set

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Sat Aug 27 04:30:52 EST 2005


------- Additional Comments From simon at sxw.org.uk  2005-08-27 04:30 -------
Unfortunately, you can't (safely and portably) just call krb5_free_creds on the
client->creds structure, as its a pointer to a GSSAPI structure, which will not
necessarily be the same (or managed by the same allocator) as the underlying
Kerberos one.

I believe that the attached patch should solve the problem.

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

More information about the openssh-bugs mailing list