gssproxy

#35 Fixes around credential handling
Closed by simo. Opened by simo.
simo/gssproxy cred_fixes  into  master

Download 35.patch
  1. Allow client to proprerly handle cred store for local calls when interposed, still no cred store transmission to proxy
  2. Allow client to properly handle delegated credentials on interposed accept call

@rharwood can you check this ?

rebased

Updated with more fixes

In general this looks good to me. Before merging, I think it would be good if we had a test case for this. (Doesn't need to be anything major; I can write it if you want.)

Since this is local-only with no transmission to the proxy, there shouldn't be any issues with leakage that we need to worry about.

4 new commits added

  • Always initialize ccache when storing.
  • In acquire_cred_from, probe for remote creds
  • Make sure to pass on request for delegated creds
  • Add cred_store support for local calls.

If you could add a test it would be really appreciated.
I just fixed another 2 issues I was having with the previous set.
One crash and another came up as it took me enough time analyzing the crash, that when I resolved it I found stale entries in the ccaches. So I added a nother patch to the pile. They are all connected.

1 new commit added

  • Add option to control client lead impersonation

4 new commits added

  • Always initialize ccache when storing.
  • In acquire_cred_from, probe for remote creds
  • Make sure to pass on request for delegated creds
  • Add cred_store support for local calls.

Pushed to master

Pull-Request has been closed by simo
Metadata
rharwood
No Tags
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.