php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #28962 auth_gss is included, but c-client can't authenticate using GSSAPI
Submitted: 2004-06-29 23:00 UTC Modified: 2004-07-15 22:16 UTC
From: liamr at umich dot edu Assigned:
Status: Closed Package: IMAP related
PHP Version: 5.0.0RC3 OS: linux 2.4.26
Private report: No CVE-ID: None
 [2004-06-29 23:00 UTC] liamr at umich dot edu
Description:
------------
This is related to http://bugs.php.net/bug.php?id=21687.
I believe the tests used to determine whether auth_gss gets invoked aren't working right.

As distributed in the tarball, auth_gss gets defined in imap.so, but it doesn't appear to get used.  To make GSSAPI authentication work, I need to move 

  auth_link(&auth_gss); /* link in the gss authenticator */

out of..

  #if HAVE_IMAP_KRB && defined(HAVE_IMAP_AUTH_GSS)
  #endif

otherwise, our ticket files don't ever get IMAP credentials.

Reproduce code:
---------------
$mbox = imap_open( "\{imap.example.com:143/imap/notls/user=" 
    . $user . "}INBOX", $user, $passwd ); 

(our servers, currently some flavor of UW IMAP seem to require the extra "user=" in the connection string)

Expected result:
----------------
We should get two things...
- a kerberos credential cache w/ IMAP credentials
- an open IMAP stream authenticated w/ GSSAPI

Actual result:
--------------
The ticket file remains unchanged, and the IMAP servers return  "AUTHENTICATE GSSAPI FAILURE"

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2004-07-15 22:16 UTC] liamr at umich dot edu
Seems to work fine in the release.
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Tue Apr 23 11:01:33 2024 UTC