]> git.ipfire.org Git - thirdparty/krb5.git/commit
Fix SPNEGO fallback context handling 998/head
authorGreg Hudson <ghudson@mit.edu>
Mon, 11 Nov 2019 17:25:41 +0000 (12:25 -0500)
committerGreg Hudson <ghudson@mit.edu>
Wed, 13 Nov 2019 22:23:12 +0000 (17:23 -0500)
commit40ecfad10dd36700028ff0f3d0d79ce7925fe545
tree43e0e36ad025c5995e3007ec75a08aa15d6737e5
parentb1c258c6aab95198bdc340b86ca67cbd531464f8
Fix SPNEGO fallback context handling

In init_ctx_call_init(), if gss_init_sec_context() fails while
producing the first SPNEGO initiator token, we remove the first
candidate mechanism from sc->mech_set and try again.  If
sc->ctx_handle is present after the error (more likely after commit
56f7b1bc95a2a3eeb420e069e7655fb181ade5cf), we must clear it before
falling back or it will cause subsequent attempts to fail.

ticket: 8846 (new)
tags: pullup
target_version: 1.17-next
target_version: 1.16-next
src/lib/gssapi/spnego/spnego_mech.c