]> git.ipfire.org Git - thirdparty/krb5.git/commit
Implement GSS_KRB5_CRED_NO_CI_FLAGS_X for SPNEGO
authorAndreas Schneider <asn@samba.org>
Tue, 23 Jun 2015 14:27:27 +0000 (16:27 +0200)
committerGreg Hudson <ghudson@mit.edu>
Thu, 2 Jul 2015 17:17:23 +0000 (13:17 -0400)
commitcf39ed349976908626cad3e05e17788f8334bce9
tree301a301524b2088f6871f1bd242919c1686583d7
parent98092b003a730fa490bf2fff1b50a2339c1b2811
Implement GSS_KRB5_CRED_NO_CI_FLAGS_X for SPNEGO

In the SPNEGO mechanism, if we see the GSS_KRB5_CRED_NO_CI_FLAGS_X
option, do not explicitly ask for integrity flag from underlying
mechanisms.  Adjust t_ciflags.c to match the new behavior, and add a
SPNEGO test using a normal initiator cred.

[ghudson@mit.edu: adjust style; fix tests here instead of in a
subsequent commit; clarify commit message]

ticket: 6938
src/lib/gssapi/spnego/gssapiP_spnego.h
src/lib/gssapi/spnego/spnego_mech.c
src/tests/gssapi/t_ciflags.c