yum pres proxy s kerberem

[Petr Tomasek]

On Mon, Aug 16, 2010 at 10:29:47AM +0200, Ludek Finstrle wrote:
> Ahoj,
> 
>   tak uz jsem to louskl :o)) Chyba byla mezi zidli a klavesnici, ale
> kupodivu ne tou mou.
> 
> Fri, Aug 13, 2010 at 02:12:38PM +0200, Pavel Kankovsky napsal(a):
> > On Fri, 13 Aug 2010, Ludek Finstrle wrote:
> > 
> > > Tady je chyba lavky. http funguje, ale https ne. A to ani s cistym curl.
> > 
> > A co řekne curl -v? Nezakazuje to vaše proxy?
> 
> Nezakazuje, toto bylo jedno z prvnich, co jsem kontroloval.
> Mockrat dekuji vsem za pomoc.
> 
> Prilozeny patch na curl problem resi. A ted reportovat u curl ...
> 
> Pouzivam Fedoru, takze predpokladam, ze reportovat i u Fedory. Par lidi
> kolem me pouziva Ubuntu, netusite, kde se to reportuje tam, aby to
> fixnuli co nejdrive? Nemuzu tady dat lidem pouzivat neco, co si
> sami musi patchnout, prip. co jim dalsi update zase zrusi.
> 
> Diky
> 
> Luf
> 

> diff -cr curl-7.19.6.orig/lib/http_negotiate.c curl-7.19.6/lib/http_negotiate.c
> *** curl-7.19.6.orig/lib/http_negotiate.c	2009-04-23 13:51:08.000000000 +0200
> --- curl-7.19.6/lib/http_negotiate.c	2010-08-16 10:12:03.000000000 +0200
> ***************
> *** 325,336 ****
>     if(len == 0)
>       return CURLE_OUT_OF_MEMORY;
>   
> !   conn->allocptr.userpwd =
> !     aprintf("%sAuthorization: %s %s\r\n", proxy ? "Proxy-" : "",
> !             neg_ctx->protocol, encoded);
>     free(encoded);
>     Curl_cleanup_negotiate (conn->data);
> !   return (conn->allocptr.userpwd == NULL) ? CURLE_OUT_OF_MEMORY : CURLE_OK;
>   }
>   
>   static void cleanup(struct negotiatedata *neg_ctx)
> --- 325,341 ----
>     if(len == 0)
>       return CURLE_OUT_OF_MEMORY;
>   
> !   if (proxy) {
> !     conn->allocptr.proxyuserpwd =
> !       aprintf("Proxy-Authorization: %s %s\r\n", neg_ctx->protocol, encoded);
> !   } else {
> !     conn->allocptr.userpwd =
> !       aprintf("Authorization: %s %s\r\n", neg_ctx->protocol, encoded);
> !   }
> ! 
>     free(encoded);
>     Curl_cleanup_negotiate (conn->data);
> !   return ((proxy?conn->allocptr.proxyuserpwd:conn->allocptr.userpwd) == NULL) ? CURLE_OUT_OF_MEMORY : CURLE_OK;
>   }
>   
>   static void cleanup(struct negotiatedata *neg_ctx)

Znamena to, ze https zenete pres proxy? Tj. ze to vlastne jde nesifrovane
mezi vami a proxynou?

P.T.

-- 
Petr Tomasek <http://www.etf.cuni.cz/~tomasek>
Jabber: butrus na jabbim.cz

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
EA 355:001  DU DU DU DU
EA 355:002  TU TU TU TU
EA 355:003  NU NU NU NU NU NU NU
EA 355:004  NA NA NA NA NA
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~