krb5 commit [krb5-1.13]: Fix gss_inquire_names_for_mech() on MS krb5 mech

Tom Yu tlyu at mit.edu
Wed Dec 2 14:58:16 EST 2015


https://github.com/krb5/krb5/commit/3de8c2cda58517b0b979fa4b328b61bace4d1492
commit 3de8c2cda58517b0b979fa4b328b61bace4d1492
Author: Tomas Kuthan <tkuthan at gmail.com>
Date:   Wed Sep 30 15:24:24 2015 +0200

    Fix gss_inquire_names_for_mech() on MS krb5 mech
    
    Allow the krb5 mech to query names for the gss_mech_krb5_wrong OID
    (the erroneous OID used in old Microsoft SPNEGO implementations).
    
    [ghudson at mit.edu: edit commit message]
    
    (cherry picked from commit 95736f7d51cce7551c3c20450ff56831a71043df)
    
    ticket: 8293 (new)
    version_fixed: 1.13.3
    status: resolved

 src/lib/gssapi/krb5/inq_names.c |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)

diff --git a/src/lib/gssapi/krb5/inq_names.c b/src/lib/gssapi/krb5/inq_names.c
index fcf7dbc..b326adb 100644
--- a/src/lib/gssapi/krb5/inq_names.c
+++ b/src/lib/gssapi/krb5/inq_names.c
@@ -40,6 +40,7 @@ krb5_gss_inquire_names_for_mech(minor_status, mechanism, name_types)
     if ((mechanism != GSS_C_NULL_OID) &&
         !g_OID_equal(gss_mech_krb5, mechanism) &&
         !g_OID_equal(gss_mech_krb5_old, mechanism) &&
+        !g_OID_equal(gss_mech_krb5_wrong, mechanism) &&
         !g_OID_equal(gss_mech_iakerb, mechanism)) {
         *minor_status = 0;
         return(GSS_S_BAD_MECH);


More information about the cvs-krb5 mailing list