projects / krb5.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 2177db6) | patch
Verify acceptor's mech in SPNEGO initiator
authorGreg Hudson <ghudson@mit.edu>
Fri, 16 Dec 2011 23:18:54 +0000 (23:18 +0000)
committerGreg Hudson <ghudson@mit.edu>
Fri, 16 Dec 2011 23:18:54 +0000 (23:18 +0000)
commitcd7d6b08aebaee50a25a8eb519588abbca633d72
treed16f7949bd87bdc7083958547e6c2d7b091238bbtree | snapshot
parent2177db67e3943ac8a6076642ffc81a7d90803890commit | diff
Verify acceptor's mech in SPNEGO initiator

In spnego_gss_ctx_id_rec, store the set of negotiable mechanisms as
well as the currently selected internal_mech, which becomes an alias
into mech_set.  In init_ctx_reselect, locate the acceptor's counter-
proposal in sc->mech_set and consider the token defective if it is not
found.

ticket: 7053
target_version: 1.10
tags: pullup

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25590 dc483132-0cff-0310-8789-dd5450dbe970
src/lib/gssapi/spnego/gssapiP_spnego.h diff | blob | history
src/lib/gssapi/spnego/spnego_mech.c diff | blob | history
MIT implementation of the Kerberos network authentication protocol. This repo may be rebased, so don't base your work on it. Use git://github.com/krb5/krb5 instead.