Bug#390696: (no subject)

[Frank Burkhardt]

Subject: libauthen-krb5-perl: TGTs should be requested 'forwardable'
Package: libauthen-krb5-perl
Version: 1.6-2
Severity: wishlist

*** Please type your report below this line ***

Hi,

it would be nice having libauthen-krb5-perl fetch 'forwardable' TGTs
by default or to make TGT flags optional. Otherwise it's impossible to use
libauthen-krb5-perl-fetched TGTs for e.g. authentication over ssh.

This is a patch making fetched TGTs (hardcoded) 'forwardable':

--- Krb5.xs.old	2006-06-11 18:37:01.000000000 +0200
+++ Krb5.xs	2006-10-02 17:57:42.000000000 +0200
@@ -331,7 +331,7 @@
 	cr.times.endtime = now + KRB5_DEFAULT_LIFE;
 	cr.times.renew_till = 0;
 
-	err = krb5_get_in_tkt_with_password(context, 0, 0, NULL, NULL,
+	err = krb5_get_in_tkt_with_password(context, TKT_FLG_FORWARDABLE, 0, NULL, NULL,
 		password, cc, &cr, 0);
 
 	if (err) XSRETURN_UNDEF;
@@ -358,7 +358,7 @@
 	cr.times.endtime = now + KRB5_DEFAULT_LIFE;
 	cr.times.renew_till = 0;
 
-	err = krb5_get_in_tkt_with_keytab(context, 0, 0, NULL, NULL,
+	err = krb5_get_in_tkt_with_keytab(context, TKT_FLG_FORWARDABLE, 0, NULL, NULL,
 		keytab, cc, &cr, 0);
 
 	if (err) XSRETURN_UNDEF;


Regards,

Frank

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18.0-f3
Locale: LANG=de_DE, LC_CTYPE=de_DE (charmap=ISO-8859-1) (ignored: LC_ALL set to de_DE)

Versions of packages libauthen-krb5-perl depends on:
ii  libc6                        2.3.6.ds1-4 GNU C Library: Shared libraries
ii  libcomerr2                   1.39-1      common error description library
ii  libkrb53                     1.4.4-3     MIT Kerberos runtime libraries
ii  perl                         5.8.8-6.1   Larry Wall's Practical Extraction 
ii  perl-base [perlapi-5.8.8]    5.8.8-6.1   The Pathologically Eclectic Rubbis

libauthen-krb5-perl recommends no packages.

-- no debconf information