Subject: | gssapi attempts to use password as a ticket |
Date: | Tue, 6 Jan 2009 22:27:29 +0100 |
To: | bug-Authen-SASL [...] rt.cpan.org |
From: | Andreas Hofmeister <andi [...] collax.com> |
Authen::SASL 2.12
When an application is unaware of the GSSAPI mechanism and passes
something true as a password, authentication fails - even though
authentication otherwise would succeed.
The applied patch just ignores the password.
(It might be useful to pass some existent GSSAPI credentials to that
module, although a software that would use such a functionality would
be aware of the GSSAPI mechanism and could use an according method in
that module directly.)
Message body is not shown because sender requested not to inline it.