diff options
| author | Greg Hudson <ghudson@mit.edu> | 2012-01-31 21:35:34 +0000 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2012-01-31 21:35:34 +0000 |
| commit | b88f63414b4149ae3019f1289033acbcf6fc7fbe (patch) | |
| tree | 4390d756e2936d8740def70b67d8fb078f2b6f3a /src/lib/gssapi | |
| parent | d4f98cdd40559620531622c9c6d988f6aa850bd0 (diff) | |
| download | krb5-b88f63414b4149ae3019f1289033acbcf6fc7fbe.tar.gz krb5-b88f63414b4149ae3019f1289033acbcf6fc7fbe.tar.xz krb5-b88f63414b4149ae3019f1289033acbcf6fc7fbe.zip | |
Don't check mech in krb5_gss_inquire_cred_by_mech
krb5_gss_inquire_cred_by_mech checks its mech argument against two of
the four mechs a krb5 cred might have (the krb5 mech and the old krb5
mech, but not the wrong Microsoft mech or the IAKERB mech), so would
spuriously fail for the other two mechs. There is no reason to check
the mechanism if we assume a reasonable mechglue is interpreting
application gss_inquire_cred_by_mech calls, so just remove the check.
ticket: 7084
target_version: 1.10.1
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25666 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/lib/gssapi')
| -rw-r--r-- | src/lib/gssapi/krb5/inq_cred.c | 10 |
1 files changed, 0 insertions, 10 deletions
diff --git a/src/lib/gssapi/krb5/inq_cred.c b/src/lib/gssapi/krb5/inq_cred.c index 057e51bfa1..78685dbaa0 100644 --- a/src/lib/gssapi/krb5/inq_cred.c +++ b/src/lib/gssapi/krb5/inq_cred.c @@ -224,16 +224,6 @@ krb5_gss_inquire_cred_by_mech(minor_status, cred_handle, OM_uint32 lifetime; OM_uint32 mstat; - /* - * We only know how to handle our own creds. - */ - if ((mech_type != GSS_C_NULL_OID) && - !g_OID_equal(gss_mech_krb5_old, mech_type) && - !g_OID_equal(gss_mech_krb5, mech_type)) { - *minor_status = 0; - return(GSS_S_NO_CRED); - } - cred = (krb5_gss_cred_id_t) cred_handle; mstat = krb5_gss_inquire_cred(minor_status, cred_handle, |