]> git.ipfire.org Git - thirdparty/krb5.git/commit
Allow SPNEGO fallback to NTLM without mechlistMIC
authorGreg Hudson <ghudson@mit.edu>
Fri, 8 Aug 2014 17:32:51 +0000 (13:32 -0400)
committerTom Yu <tlyu@mit.edu>
Tue, 12 Aug 2014 21:51:55 +0000 (17:51 -0400)
commite1c6b2cc02b0b28cf3037e20f2ef418db22d8cd3
tree295a518889258f7923d303709f8eec229d66558d
parentf678ea7b849248d678b9369edfc124b0589e6eb4
Allow SPNEGO fallback to NTLM without mechlistMIC

For interoperability with Windows Server 2003 and earlier, loosen the
initiator's enforcement of RFC 4178's mechlistMIC requirement when
falling back to NTLMSSP.

[ghudson@mit.edu: rewrote commit message, added comment to NTLMSSP
OID]

(cherry picked from commit 7208dace8bfbdf5b930e26a19c8ff31c13ea1ef3)

ticket: 7975
version_fixed: 1.13
status: resolved
src/lib/gssapi/spnego/spnego_mech.c