[krbdev.mit.edu #7797] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Thu Dec 12 11:02:47 EST 2013


Fix SPNEGO one-hop interop against old IIS

IIS 6.0 and similar return a zero length reponse buffer in the last
SPNEGO packet when context initiation is performed without mutual
authentication.  In this case the underlying Kerberos mechanism has
already completed successfully on the first invocation, and SPNEGO
does not expect a mech response token in the answer.  If we get an
empty mech response token when the mech is complete during
negotiation, ignore it.

[ghudson at mit.edu: small code style and commit message changes]

https://github.com/krb5/krb5/commit/37af638b742dbd642eb70092e4f7781c3f69d86d
Author: Greg Hudson <ghudson at mit.edu>
Commit: 37af638b742dbd642eb70092e4f7781c3f69d86d
Branch: master
 src/lib/gssapi/spnego/spnego_mech.c |    6 ++++++
 1 files changed, 6 insertions(+), 0 deletions(-)



More information about the krb5-bugs mailing list