python-kerberos-1.1-6.2.el6 includes an off-by-one bug, with the result that it incorrectly encodes the Kerberos username into a GSSAPI message and authentication always fails. The bug was reported and fixed upstream:<br />
<br />
<a href="http://trac.calendarserver.org/ticket/355">http://trac.calendarserver.org/ticket/355</a> [<a href="http://trac.calendarserver.org/ticket/355" target="_blank">^</a>]<br />
<br />
Remove the " + 1" from the end of line 358 in python-kerberos-1.1/src/kerberosgss.c and rebuild python-kerberos. Authentication now succeeds. This is the fix to issue 355 upstream:<br />
<br />
<a href="http://trac.calendarserver.org/ticket/355">http://trac.calendarserver.org/ticket/355</a> [<a href="http://trac.calendarserver.org/ticket/355" target="_blank">^</a>]<br />
<br />
<a href="http://trac.calendarserver.org/changeset?reponame=&new=4895%40PyKerberos%2Ftrunk&old=4241%40PyKerberos%2Ftrunk">http://trac.calendarserver.org/changeset?reponame=&new=4895%40PyKerberos%2Ftrunk&old=4241%40PyKerberos%2Ftrunk</a> [<a href="http://trac.calendarserver.org/changeset?reponame=&new=4895%40PyKerberos%2Ftrunk&old=4241%40PyKerberos%2Ftrunk" target="_blank">^</a>]
↧
