"Allow GSSAPI credential delegation failure" at first try

Advertisement

Roman Hatzky
Guest

"Allow GSSAPI credential delegation failure" at first try

Dear support-team,
I switched on the "Allow GSSAPI credential delegation" and saved my session details. Then I tried to connect and it failed (see attached screen shot WINSCP_bug.png and de_bug.log). Then I closed WinSCP and tried the saved session again. Now it worked (see attached de_nobug.txt which I truncated). Since then it works always.

Sincerely,
Roman Hatzky
  • de_nobug.txt (9.9 KB, Private file)
Description: Truncated log file of absent bug
  • de_bug.log (11.96 KB, Private file)
Description: Log file of bug
  • WINSCP_bug.png (90.19 KB, Private file)
Description: Sceenshot of bug

Reply with quote

Advertisement

martin
Site Admin
martin avatar
Joined:
Posts:
41,468
Location:
Prague, Czechia

Re: "Allow GSSAPI credential delegation failure" at first try

Thanks for your report. Are you able to reproduce the problem?
I can see that the difference is probably that in one case SSPI was used, while in the other GSSAPI was used. Do you have any idea why is that? Did you change something on the system meanwhile?

Reply with quote

rhatzky
Joined:
Posts:
1

Re: "Allow GSSAPI credential delegation failure" at first try

martin wrote:

Thanks for your report. So you are not able to reproduce the problem anymore?

I can reproduce the problem. It appears every time I construct a new session in the same way as I described.

I suggest that the problem might be the following one. By default it seems to be that WinSCP uses the Microsoft SSPI SECUR32.DLL. This crashes (mybe the 32-bit library does not fit with my 64-bit WinSCP?). Somehow WinSCP detects the failure and excludes SSPI for future tries. From that on the MIT Kerberos GSSAPI64.dll is used instead. This is the library I had inteded to use from the beginning.

Reply with quote

martin
Site Admin
martin avatar

Re: "Allow GSSAPI credential delegation failure" at first try

I have sent you an email with a debug version of WinSCP to the address you have used to register on this forum.

Reply with quote

Advertisement

You can post new topics in this forum