[krbdev.mit.edu #7592] git commit

Tom Yu via RT rt-comment at krbdev.mit.edu
Wed Apr 3 19:47:14 EDT 2013


Fix import_sec_context with interposers

The code was correctly selecting the mechanism to execute, but it was
improperly setting the mechanism type of the internal context when the
selected mechanism was that of an interposer and vice versa.

When an interposer is involved the internal context is that of the
interposer, so the mechanism type of the context needs to be the
interposer oid.  Conversely, when an interposer re-enters gssapi and
presents a token with a special oid, the mechanism called is the real
mechanism, and the context returned is a real mechanism context.  In
this case the mechanism type of the context needs to be that of the
real mechanism.

(cherry picked from commit 36c76aa3c625afc9291b9e1df071db51ccf37dab)

https://github.com/krb5/krb5/commit/db203a153fbe2b776210e966bf198c40f796d535
Author: Simo Sorce <simo at redhat.com>
Committer: Tom Yu <tlyu at mit.edu>
Commit: db203a153fbe2b776210e966bf198c40f796d535
Branch: krb5-1.11
 src/lib/gssapi/mechglue/g_imp_sec_context.c |   35 ++++++++++----------------
 1 files changed, 14 insertions(+), 21 deletions(-)



More information about the krb5-bugs mailing list