diff options
| author | Greg Hudson <ghudson@mit.edu> | 2011-04-04 23:06:09 +0000 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2011-04-04 23:06:09 +0000 |
| commit | 79c34ed3d829ee9e3fa64aa5b3b90b4e37514cf7 (patch) | |
| tree | aff16b0d48c7ceaa24142527741e9f7d056b271f /src/lib/gssapi/generic/gssapi_ext.h | |
| parent | 308efc2ae8a8b21a6e74a8015197801d414f1bfb (diff) | |
| download | krb5-79c34ed3d829ee9e3fa64aa5b3b90b4e37514cf7.tar.gz krb5-79c34ed3d829ee9e3fa64aa5b3b90b4e37514cf7.tar.xz krb5-79c34ed3d829ee9e3fa64aa5b3b90b4e37514cf7.zip | |
More sensical mech selection for gss_acquire_cred/accept_sec_context
If a caller passes an empty mech set to gss_acquire_cred, get a cred
for all mechs instead of just the krb5 mech, as we don't know what
mechanism the cred is going to be used with (particularly in the
acceptor case). As a related fix, if a caller passes a credential to
gss_accept_sec_context and it does not contain a mech-specific cred
for the token's mech, error out instead of using the default cred with
the token's mechanism.
ticket: 6894
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24840 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/lib/gssapi/generic/gssapi_ext.h')
0 files changed, 0 insertions, 0 deletions