From: Tomas Kuthan <tkuthan@gmail.com>
Date: Wed, 30 Sep 2015 13:24:24 +0000 (+0200)
Subject: Fix gss_inquire_names_for_mech() on MS krb5 mech
X-Git-Tag: krb5-1.12.5-final~6
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a8c8b08c215f4494c8590e9ebfb9eebb8cfd56b4;p=thirdparty%2Fkrb5.git

Fix gss_inquire_names_for_mech() on MS krb5 mech

Allow the krb5 mech to query names for the gss_mech_krb5_wrong OID
(the erroneous OID used in old Microsoft SPNEGO implementations).

[ghudson@mit.edu: edit commit message]

(cherry picked from commit 95736f7d51cce7551c3c20450ff56831a71043df)

ticket: 8324 (new)
version_fixed: 1.12.5
status: resolved
---

diff --git a/src/lib/gssapi/krb5/inq_names.c b/src/lib/gssapi/krb5/inq_names.c
index fcf7dbcd3a..b326adbb5f 100644
--- a/src/lib/gssapi/krb5/inq_names.c
+++ b/src/lib/gssapi/krb5/inq_names.c
@@ -40,6 +40,7 @@ krb5_gss_inquire_names_for_mech(minor_status, mechanism, name_types)
     if ((mechanism != GSS_C_NULL_OID) &&
         !g_OID_equal(gss_mech_krb5, mechanism) &&
         !g_OID_equal(gss_mech_krb5_old, mechanism) &&
+        !g_OID_equal(gss_mech_krb5_wrong, mechanism) &&
         !g_OID_equal(gss_mech_iakerb, mechanism)) {
         *minor_status = 0;
         return(GSS_S_BAD_MECH);