svn commit: samba r21849 - in branches/SAMBA_3_0_25/source/libaddns: .

[Love Hörnquist Åstrand]

19 mar 2007 kl. 04.36 skrev Love Hörnquist Åstrand:

> 16 mar 2007 kl. 08.09 skrev jerry at samba.org:
>
>> +	/* don't free the printcap until after you call
>> +	   gss_release_name() or else you'll get a segv
>> +	   as the krb5_copy_principal() does a structure
>> +	   copy and not a deep copy.    --jerry*/
>
> You sure about this ? From what I read from the MIT and heimdal
> source they both make deep copy.

Ah, so it was the gss-api code that is broken.

Why do you use the not-in-standard OID, would it not
be better to use GSS_KRB5_NT_PRINCIPAL_NAME
that takes a single-string representation of a Kerberos name.

Read section 2.1.1 of rfc 1964, this way it at least have a chance
to work with other gss-krb5 mechamism too.

Love