diff options
| author | Greg Hudson <ghudson@mit.edu> | 2011-12-16 23:19:01 +0000 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2011-12-16 23:19:01 +0000 |
| commit | e946963e0f8488a8d47c527cca31d4666c32e063 (patch) | |
| tree | 311fe11a247ddfd6ce677c75d72345a8836e22bb /src/util/k5test.py | |
| parent | cd7d6b08aebaee50a25a8eb519588abbca633d72 (diff) | |
| download | krb5-e946963e0f8488a8d47c527cca31d4666c32e063.tar.gz krb5-e946963e0f8488a8d47c527cca31d4666c32e063.tar.xz krb5-e946963e0f8488a8d47c527cca31d4666c32e063.zip | |
Do mech fallback for first SPNEGO context token
When producing the first SPNEGO security context token, if the first
mechanism's init_sec_context fails, fall back to a later mechanism.
This fixes a regression in 1.10 for SPNEGO initiators using non-krb5
credentials. The identity selection work causes errors to be deferred
from krb5's acquire_cred in some cases, which means SPNEGO doesn't see
an error until it tries the krb5 init_sec_context.
ticket: 6936
target_version: 1.10
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25591 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/util/k5test.py')
0 files changed, 0 insertions, 0 deletions