diff options
| author | Greg Hudson <ghudson@mit.edu> | 2013-05-01 14:40:31 -0400 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2016-01-19 14:37:14 -0500 |
| commit | ae54defbcc1b076d91927e14ae9bcb86f758ead3 (patch) | |
| tree | 867dbea3da13291dd90ef2f093e2a0ffbbbd79b6 | |
| parent | 7d2c871e55b5483ded057d3492551821c243c544 (diff) | |
| download | krb5-krb5-1.9.zip krb5-krb5-1.9.tar.gz krb5-krb5-1.9.tar.bz2 | |
Disable UDP pass of gssrpc tests on all platformskrb5-1.9
The AUTH_GSSAPI flavor of rpc authentication uses IP address channel
bindings. These are broken over UDP, because svcudp_recv() fails to
get the destination address of incoming packets (it tries to use the
recvmsg() msg_name field to get the destination IP address, which
instead gets the source address; see ticket #5540).
There is no simple or comprehensive way to fix this; using IP_PKTINFO
is a fair amount of code and only works on some platforms. It's also
not very important--nobody should be using AUTH_GSSAPI except perhaps
for compatibility with really old kadmin, and kadmin only runs over
TCP. Since the gssrpc tests are closely wedded to AUTH_GSSAPI, the
simplest fix is to only run the TCP pass.
| -rw-r--r-- | src/configure.in | 11 |
1 files changed, 1 insertions, 10 deletions
diff --git a/src/configure.in b/src/configure.in index b84a6e4..d713d8b 100644 --- a/src/configure.in +++ b/src/configure.in @@ -930,16 +930,7 @@ extern void endrpcent();], AC_MSG_RESULT($k5_cv_type_endrpcent) AC_DEFINE_UNQUOTED(ENDRPCENT_TYPE, $k5_cv_type_endrpcent, [Define as return type of endrpcent]) K5_GEN_FILE(include/gssrpc/types.h:include/gssrpc/types.hin) -changequote(<<, >>) -case "$krb5_cv_host" in -*-*-solaris2.[012345]*) - PASS=tcp - ;; -*) - PASS="tcp udp" - ;; -esac -changequote([, ]) +PASS=tcp AC_SUBST(PASS) # for pkinit |