Commit f96f8bf46069b2f613b66bb2ee3e9fc6b7be9a34 - krb5

Fix SPNEGO acceptor mech filtering Commit c2ca2f26eaf817a6a7ed42257c380437ab802bd9 (ticket 8851) accidentally changed the SPNEGO acceptor code to filter mechanisms by the obtainability of initiator credentials rather than acceptor credentials, when the default acceptor credential is used. (cherry picked from commit e25918cb9efd7361aa78d2d96cd097dd34fdf35d) ticket: 8908 version_fixed: 1.18.2 Greg Hudson 3 years ago

1 changed file(s) with 1 addition(s) and 1 deletion(s). Raw diff Collapse all Expand all

-1

src/lib/gssapi/spnego/spnego_mech.c less more

1378	1378	goto cleanup;
1379	1379	}
1380	1380
1381		ret = get_negotiable_mechs(minor_status, sc, spcred, GSS_C_INITIATE);
	1381	ret = get_negotiable_mechs(minor_status, sc, spcred, GSS_C_ACCEPT);
1382	1382	if (ret != GSS_S_COMPLETE) {
1383	1383	*return_token = NO_TOKEN_SEND;
1384	1384	goto cleanup;