bugConcurrent Versions System - Bugs: bug #18830, cvs-1.11 GSSAPI fails with...

 
 

bug #18830: cvs-1.11 GSSAPI fails with DNS-loadbalanced servers

Submitted by:  None
Submitted on:  Fri 19 Jan 2007 09:36:57 AM UTC  
 
Category: Bug Fix (patch attached)Severity: 3 - Normal
Item Group: NoneStatus: None
Privacy: PublicAssigned to: None
Open/Closed: OpenRelease: 
Fixed Release: NoneFixed Feature Release: None

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Fri 19 Jan 2007 09:36:57 AM UTC, original submission:

"gserver" authentication against loadbalanced hosts fails intermittently. Examination shows that the "cvs" service ticket is for a different server than the one cvs connected to.

GSSAPI will do its own resolution of the remote server in
gss_init_sec_context. And netinfo->h_name apparently isn't guaranteed to be the forward+reverse'd-DNS name; in our case it corresponds to the 'server' name. Together this lead to wrong credentials being retrieved for DNS-loadbalanced servers where the DNS alias changes between connection and GSSAPI-calls.

The proposed patch (against 1.11.17) instead feeds GSSAPI the IP of the remote host (which we already used to connect()) and let GSSAPI figure out the correct credentials for that IP.

The code has changed in 1.12, I don't know whether this is still an issue there. But 1.11 clients are still widely used, so perhaps somebody will find this patch useful..

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

Attached Files
file #11782:  cvs-1.11.17-gssapi-dns.patch added by None (2kB - text/x-patch)

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follow 2 latest changes.

Date Changed By Updated Field Previous Value => Replaced By
Fri 19 Jan 2007 09:41:31 AM UTCivenCarbon-Copy-=>Added iven
Fri 19 Jan 2007 09:36:57 AM UTCNoneAttached File-=>Added cvs-1.11.17-gssapi-dns.patch, #11782

Back to the top


Powered by Savane 3.1-cleanup