[krbdev.mit.edu #8025] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Mon Jun 29 23:02:00 EDT 2015


Allow gss_inquire_context on partial krb5 contexts

RFC 2743 states that gss_inquire_context() must always return flags,
locally_initiated, and open even if a context is not yet fully
established.  Additionally, a partially established context may also
return mech_type.

Previously, the krb5 mech raised an error for inquire_context on
partially completed contexts.  It now follows the rules layed out in
RFC 2743.

Add a new test program to verify that gss_inquire_context() works
correctly on both in-progress and established contexts.

[ghudson at mit.edu: minor style changes and commit message edits]

https://github.com/krb5/krb5/commit/9f095e1aab582e5a94c93d587f6d09e9d8f7479e
Author: Solly Ross <sross at redhat.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 9f095e1aab582e5a94c93d587f6d09e9d8f7479e
Branch: master
 .gitignore                              |    1 +
 src/lib/gssapi/krb5/inq_context.c       |   90 ++++++++++++---------
 src/lib/gssapi/mechglue/g_inq_context.c |    5 +-
 src/tests/gssapi/Makefile.in            |   17 +++--
 src/tests/gssapi/t_gssapi.py            |    4 +
 src/tests/gssapi/t_inq_ctx.c            |  131 +++++++++++++++++++++++++++++++
 6 files changed, 202 insertions(+), 46 deletions(-)



More information about the krb5-bugs mailing list