aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGreg Hudson <ghudson@mit.edu>2013-05-01 14:40:31 -0400
committerGreg Hudson <ghudson@mit.edu>2016-01-19 14:37:14 -0500
commitae54defbcc1b076d91927e14ae9bcb86f758ead3 (patch)
tree867dbea3da13291dd90ef2f093e2a0ffbbbd79b6
parent7d2c871e55b5483ded057d3492551821c243c544 (diff)
downloadkrb5-krb5-1.9.zip
krb5-krb5-1.9.tar.gz
krb5-krb5-1.9.tar.bz2
Disable UDP pass of gssrpc tests on all platformskrb5-1.9
The AUTH_GSSAPI flavor of rpc authentication uses IP address channel bindings. These are broken over UDP, because svcudp_recv() fails to get the destination address of incoming packets (it tries to use the recvmsg() msg_name field to get the destination IP address, which instead gets the source address; see ticket #5540). There is no simple or comprehensive way to fix this; using IP_PKTINFO is a fair amount of code and only works on some platforms. It's also not very important--nobody should be using AUTH_GSSAPI except perhaps for compatibility with really old kadmin, and kadmin only runs over TCP. Since the gssrpc tests are closely wedded to AUTH_GSSAPI, the simplest fix is to only run the TCP pass.
-rw-r--r--src/configure.in11
1 files changed, 1 insertions, 10 deletions
diff --git a/src/configure.in b/src/configure.in
index b84a6e4..d713d8b 100644
--- a/src/configure.in
+++ b/src/configure.in
@@ -930,16 +930,7 @@ extern void endrpcent();],
AC_MSG_RESULT($k5_cv_type_endrpcent)
AC_DEFINE_UNQUOTED(ENDRPCENT_TYPE, $k5_cv_type_endrpcent, [Define as return type of endrpcent])
K5_GEN_FILE(include/gssrpc/types.h:include/gssrpc/types.hin)
-changequote(<<, >>)
-case "$krb5_cv_host" in
-*-*-solaris2.[012345]*)
- PASS=tcp
- ;;
-*)
- PASS="tcp udp"
- ;;
-esac
-changequote([, ])
+PASS=tcp
AC_SUBST(PASS)
# for pkinit