]> git.ipfire.org Git - thirdparty/krb5.git/commit
Revisit inquire_attrs_for_mech on old mechs 426/head
authorGreg Hudson <ghudson@mit.edu>
Tue, 15 Mar 2016 21:45:26 +0000 (17:45 -0400)
committerGreg Hudson <ghudson@mit.edu>
Thu, 17 Mar 2016 00:43:08 +0000 (20:43 -0400)
commit89683d1f135765e91041f3a239af865b11aaf86b
treef5de65e3240f962d66633f00881f045d27dd0652
parent18252584fd8cbfb43144337833fc83d4d2d12da5
Revisit inquire_attrs_for_mech on old mechs

In gss_inquire_attrs_for_mech(), if the mech does not implement RFC
5587, return success with empty mech_attrs and known_mech_attrs sets
to indicate a lack of knowledge for all attributes.  The previous
behavior of returning an error caused gss_indicate_mechs_by_attr() to
fail out in the presence of an old mechanism, in turn causing
gss_acquire_cred() and SPNEGO to break.

ticket: 8358
src/lib/gssapi/mechglue/g_mechattr.c