freebsd-nq/sys/rpc/rpcsec_gss
Rick Macklem b211588596 If the initial attempt to refresh credentials in the RPCSEC_GSS client
side fails, the entry in the cache is left with no valid context
(gd_ctx == GSS_C_NO_CONTEXT). As such, subsequent hits on the cache
will result in persistent authentication failure, even after the user has
done a kinit or similar and acquired a new valid TGT. This patch adds a test
for that case upon a cache hit and calls rpc_gss_init() to make another
attempt at getting valid credentials. It also moves the setting of gc_proc
to before the import of the principal name to ensure that, if that case
fails, it will be detected as a failure after going to "out:".

Reviewed by:	dfr
Approved by:	kib (mentor)
2009-06-24 18:30:14 +00:00
..
rpcsec_gss_conf.c
rpcsec_gss_int.h
rpcsec_gss_misc.c
rpcsec_gss_prot.c
rpcsec_gss.c If the initial attempt to refresh credentials in the RPCSEC_GSS client 2009-06-24 18:30:14 +00:00
svc_rpcsec_gss.c Delete the declaration of an unused variable so that it will build. 2009-06-20 17:16:29 +00:00