Add "-dce" commandline option to gss-client.c to set GSS_C_DCE_STYLE flag
authorSam Hartman <hartmans@mit.edu>
Fri, 14 Oct 2011 14:40:17 +0000 (14:40 +0000)
committerSam Hartman <hartmans@mit.edu>
Fri, 14 Oct 2011 14:40:17 +0000 (14:40 +0000)
Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com>
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@25333 dc483132-0cff-0310-8789-dd5450dbe970

src/appl/gss-sample/README
src/appl/gss-sample/gss-client.c
src/appl/gss-sample/t_gss_sample.py

index dc51fca1bb1aa7829a5503daad25c1b3575cb4fa..c207aba894b9fef740da3430250bcd9f2429aaf2 100644 (file)
@@ -84,7 +84,7 @@ is used).  The command-line options have the following meanings:
 The client's command line usage is
 
        gss-client [-port port] [-mech mechanism] [-d] [-f] [-q]
-        [-seq] [-noreplay] [-nomutual]         
+        [-seq] [-noreplay] [-nomutual] [-dce]
         [-ccount count] [-mcount count] [-na] [-nw] [-nx] [-nm]
                host service_name msg
 
@@ -112,6 +112,8 @@ the following meanings:
 -noreplay Tells the client to disable the use of replay
     detection.
 
+-dce   Tells the client to request DCE-style authentication.
+
 -nomutual Tells the client to disable the use of mutual authentication.
 
 -f     Tells the client that the "msg" argument is actually the name
index 1cb797dacae0e3f7071da0256b186b469f4dcbf0..6070d428c81c7264b3c71e62783bb7ea5f5fc1b1 100644 (file)
@@ -825,6 +825,8 @@ main(argc, argv)
                 usage();
             max_threads = atoi(*argv);
 #endif
+        } else if (strcmp(*argv, "-dce") == 0) {
+            gss_flags |= GSS_C_DCE_STYLE;
         } else if (strcmp(*argv, "-d") == 0) {
             gss_flags |= GSS_C_DELEG_FLAG;
         } else if (strcmp(*argv, "-seq") == 0) {
index 09d0803ce1f9aec310eabee4e4d7bfa45e4904a9..cfac43d85c6b22d13612353986a5a38e47d77caf 100644 (file)
@@ -72,9 +72,13 @@ for realm in multipass_realms():
     tgs_test(realm, ['-krb5'])
     tgs_test(realm, ['-spnego'])
     tgs_test(realm, ['-iakerb'])
+    # test default (i.e., krb5) mechanism with GSS_C_DCE_STYLE
+    tgs_test(realm, ['-dce'])
 
     as_test(realm, ['-krb5'])
     as_test(realm, ['-spnego'])
     as_test(realm, ['-iakerb'])
+    # test default (i.e., krb5) mechanism with GSS_C_DCE_STYLE
+    as_test(realm, ['-dce'])
 
 success('GSS sample application')