#28962 [Opn->Csd]: auth_gss is included, but c-client can't authenticate using GSSAPI
| From: | liamr at umich dot edu | Date: | Thu, 15 Jul 2004 20:16:40 +0000 |
| Subject: | #28962 [Opn->Csd]: auth_gss is included, but c-client can't authenticate using GSSAPI | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-62405@lists.php.net to get a copy of this message | ||
ID: 28962
User updated by: liamr at umich dot edu
Reported By: liamr at umich dot edu
-Status: Open
+Status: Closed
Bug Type: IMAP related
Operating System: linux 2.4.26
PHP Version: 5.0.0RC3
New Comment:
Seems to work fine in the release.
Previous Comments:
------------------------------------------------------------------------
[2004-06-29 23:00:30] liamr at umich dot edu
Description:
------------
This is related to http://bugs.php.net/bug.php?id=21687.
I believe the tests used to determine whether auth_gss gets invoked
aren't working right.
As distributed in the tarball, auth_gss gets defined in imap.so, but it
doesn't appear to get used. To make GSSAPI authentication work, I need
to move
auth_link(&auth_gss); /* link in the gss authenticator */
out of..
#if HAVE_IMAP_KRB && defined(HAVE_IMAP_AUTH_GSS)
#endif
otherwise, our ticket files don't ever get IMAP credentials.
Reproduce code:
---------------
$mbox = imap_open( "\{imap.example.com:143/imap/notls/user="
. $user . "}INBOX", $user, $passwd );
(our servers, currently some flavor of UW IMAP seem to require the
extra "user=" in the connection string)
Expected result:
----------------
We should get two things...
- a kerberos credential cache w/ IMAP credentials
- an open IMAP stream authenticated w/ GSSAPI
Actual result:
--------------
The ticket file remains unchanged, and the IMAP servers return
"AUTHENTICATE GSSAPI FAILURE"
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=28962&edit=1