]> git.ipfire.org Git - thirdparty/krb5.git/commit
Allow gss_inquire_context on partial krb5 contexts
authorSolly Ross <sross@redhat.com>
Mon, 8 Jun 2015 18:06:18 +0000 (14:06 -0400)
committerGreg Hudson <ghudson@mit.edu>
Tue, 30 Jun 2015 03:01:34 +0000 (23:01 -0400)
commit9f095e1aab582e5a94c93d587f6d09e9d8f7479e
treedf1d44266afd67c4ddced178eb3f7b868df133c5
parent27e6ab7e5b6a0538f529f440aeb967822eff8f57
Allow gss_inquire_context on partial krb5 contexts

RFC 2743 states that gss_inquire_context() must always return flags,
locally_initiated, and open even if a context is not yet fully
established.  Additionally, a partially established context may also
return mech_type.

Previously, the krb5 mech raised an error for inquire_context on
partially completed contexts.  It now follows the rules layed out in
RFC 2743.

Add a new test program to verify that gss_inquire_context() works
correctly on both in-progress and established contexts.

[ghudson@mit.edu: minor style changes and commit message edits]

ticket: 8025
.gitignore
src/lib/gssapi/krb5/inq_context.c
src/lib/gssapi/mechglue/g_inq_context.c
src/tests/gssapi/Makefile.in
src/tests/gssapi/t_gssapi.py
src/tests/gssapi/t_inq_ctx.c [new file with mode: 0644]