]> git.ipfire.org Git - thirdparty/krb5.git/commitdiff
Fix gss_inquire_names_for_mech() on MS krb5 mech
authorTomas Kuthan <tkuthan@gmail.com>
Wed, 30 Sep 2015 13:24:24 +0000 (15:24 +0200)
committerTom Yu <tlyu@mit.edu>
Thu, 10 Dec 2015 22:35:05 +0000 (17:35 -0500)
Allow the krb5 mech to query names for the gss_mech_krb5_wrong OID
(the erroneous OID used in old Microsoft SPNEGO implementations).

[ghudson@mit.edu: edit commit message]

(cherry picked from commit 95736f7d51cce7551c3c20450ff56831a71043df)

ticket: 8324 (new)
version_fixed: 1.12.5
status: resolved

src/lib/gssapi/krb5/inq_names.c

index fcf7dbcd3a5c501f3958c5a21352a0684ac49484..b326adbb5f233e0ac8ddf5606064a264fdb2a595 100644 (file)
@@ -40,6 +40,7 @@ krb5_gss_inquire_names_for_mech(minor_status, mechanism, name_types)
     if ((mechanism != GSS_C_NULL_OID) &&
         !g_OID_equal(gss_mech_krb5, mechanism) &&
         !g_OID_equal(gss_mech_krb5_old, mechanism) &&
+        !g_OID_equal(gss_mech_krb5_wrong, mechanism) &&
         !g_OID_equal(gss_mech_iakerb, mechanism)) {
         *minor_status = 0;
         return(GSS_S_BAD_MECH);