#

# This patch fixes an issue where gss_store_cred(), when called with

# overwrite_creds is 1, is not overwriting the ccache file which causes

# problems when trying to get service tickets and there is an expired tgt cred

# in that ccache.

#

# This problem has been reported to MIT via this ticket: 8010 gss_store_cred

# should initialize ccache and work with collections

#

# Patch source: in-house

#

--- a/src/lib/gssapi/krb5/store_cred.c

+++ b/src/lib/gssapi/krb5/store_cred.c

@@ -143,6 +143,15 @@ copy_initiator_creds(OM_uint32 *minor_status,

major_status = GSS_S_FAILURE;

goto cleanup;

}

+ if (overwrite_cred) {

+ code = krb5_cc_initialize(context, ccache,

+ kcred->name->princ);

+ if (code != 0) {

+ *minor_status = code;

+ major_status = GSS_S_CRED_UNAVAIL;

+ goto cleanup;

+ }

+ }

}

code = krb5_cc_copy_creds(context, kcred->ccache, ccache);