]> git.ipfire.org Git - thirdparty/krb5.git/commit
Process SPNEGO error tokens through mech 885/head
authorLuke Howard <lukeh@padl.com>
Fri, 28 Dec 2018 12:13:05 +0000 (23:13 +1100)
committerGreg Hudson <ghudson@mit.edu>
Wed, 6 Feb 2019 19:32:17 +0000 (14:32 -0500)
commit51d3f2ab706197bf8fea82e0a7e9c877d6563986
treea6757ccdbcdb9919b4743b3c5095e1e3356b6475
parentcf6ad29d398980077b6fae1631a44ff3eb3110d1
Process SPNEGO error tokens through mech

In the SPNEGO initiator code, if the acceptor returns a token with
negState=REJCET and a mechanism token, process the token through the
mech to get a better error status.

[ghudson@mit.edu: modified approach for clarity and to prevent some
edge cases; rewrote commit message]

ticket: 8775 (new)
src/lib/gssapi/spnego/spnego_mech.c
src/tests/gssapi/t_err.c
src/tests/gssapi/t_gssapi.py