]> git.ipfire.org Git - thirdparty/krb5.git/commit
Restrict SPNEGO acceptor mechs by cred acquisition 994/head
authorGreg Hudson <ghudson@mit.edu>
Tue, 5 Nov 2019 21:51:02 +0000 (16:51 -0500)
committerGreg Hudson <ghudson@mit.edu>
Fri, 8 Nov 2019 21:58:31 +0000 (16:58 -0500)
commitc088f56a62702a2cc99c26185681efee1555b7fa
tree66ebd6acc31bd26daeae8b35b764d2cfa3948936
parent877e155fae0fb0d2b106619a60f59c51495591a1
Restrict SPNEGO acceptor mechs by cred acquisition

When the default cred is used, the SPNEGO initiator restricts the list
of negotiable mechanisms to those we can acquire a cred for, so that
we don't propose a mech we know can't work.  The acceptor should do
the same.

ticket: 8844
src/lib/gssapi/spnego/spnego_mech.c