diff options
author | Greg Hudson <ghudson@mit.edu> | 2013-05-01 14:40:31 -0400 |
---|---|---|
committer | Greg Hudson <ghudson@mit.edu> | 2013-05-01 17:18:45 -0400 |
commit | 11bd102c0e3793204111f712e5bd4bf54f2d9573 (patch) | |
tree | 2530b9b53c67aa2e0304a8b94991a85d564027f2 /src/lib | |
parent | 5df34938ad875db43a584f12e181b8ae9705ff44 (diff) | |
download | krb5-11bd102c0e3793204111f712e5bd4bf54f2d9573.tar.gz krb5-11bd102c0e3793204111f712e5bd4bf54f2d9573.tar.xz krb5-11bd102c0e3793204111f712e5bd4bf54f2d9573.zip |
Disable UDP pass of gssrpc tests on all platforms
The AUTH_GSSAPI flavor of rpc authentication uses IP address channel
bindings. These are broken over UDP, because svcudp_recv() fails to
get the destination address of incoming packets (it tries to use the
recvmsg() msg_name field to get the destination IP address, which
instead gets the source address; see ticket #5540).
There is no simple or comprehensive way to fix this; using IP_PKTINFO
is a fair amount of code and only works on some platforms. It's also
not very important--nobody should be using AUTH_GSSAPI except perhaps
for compatibility with really old kadmin, and kadmin only runs over
TCP. Since the gssrpc tests are closely wedded to AUTH_GSSAPI, the
simplest fix is to only run the TCP pass.
Diffstat (limited to 'src/lib')
0 files changed, 0 insertions, 0 deletions