[krbdev.mit.edu #7592] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Sun Mar 24 02:36:37 EDT 2013


Fix import_sec_context with interposers

The code was correctly selecting the mechanism to execute, but it was
improperly setting the mechanism type of the internal context when the
selected mechanism was that of an interposer and vice versa.

When an interposer is involved the internal context is that of the
interposer, so the mechanism type of the context needs to be the
interposer oid.  Conversely, when an interposer re-enters gssapi and
presents a token with a special oid, the mechanism called is the real
mechanism, and the context returned is a real mechanism context.  In
this case the mechanism type of the context needs to be that of the
real mechanism.

https://github.com/krb5/krb5/commit/36c76aa3c625afc9291b9e1df071db51ccf37dab
Author: Simo Sorce <simo at redhat.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 36c76aa3c625afc9291b9e1df071db51ccf37dab
Branch: master
 src/lib/gssapi/mechglue/g_imp_sec_context.c |   35 ++++++++++----------------
 1 files changed, 14 insertions(+), 21 deletions(-)



More information about the krb5-bugs mailing list