[29156] in CVS-changelog-for-Kerberos-V5
krb5 commit [krb5-1.13]: Fix gss_inquire_names_for_mech() on MS krb5
daemon@ATHENA.MIT.EDU (Tom Yu)
Wed Dec 2 14:58:23 2015
Date: Wed, 2 Dec 2015 14:58:16 -0500
From: Tom Yu <tlyu@mit.edu>
Message-Id: <201512021958.tB2JwGAZ031703@drugstore.mit.edu>
To: cvs-krb5@mit.edu
Reply-To: krbdev@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cvs-krb5-bounces@mit.edu
https://github.com/krb5/krb5/commit/3de8c2cda58517b0b979fa4b328b61bace4d1492
commit 3de8c2cda58517b0b979fa4b328b61bace4d1492
Author: Tomas Kuthan <tkuthan@gmail.com>
Date: Wed Sep 30 15:24:24 2015 +0200
Fix gss_inquire_names_for_mech() on MS krb5 mech
Allow the krb5 mech to query names for the gss_mech_krb5_wrong OID
(the erroneous OID used in old Microsoft SPNEGO implementations).
[ghudson@mit.edu: edit commit message]
(cherry picked from commit 95736f7d51cce7551c3c20450ff56831a71043df)
ticket: 8293 (new)
version_fixed: 1.13.3
status: resolved
src/lib/gssapi/krb5/inq_names.c | 1 +
1 files changed, 1 insertions(+), 0 deletions(-)
diff --git a/src/lib/gssapi/krb5/inq_names.c b/src/lib/gssapi/krb5/inq_names.c
index fcf7dbc..b326adb 100644
--- a/src/lib/gssapi/krb5/inq_names.c
+++ b/src/lib/gssapi/krb5/inq_names.c
@@ -40,6 +40,7 @@ krb5_gss_inquire_names_for_mech(minor_status, mechanism, name_types)
if ((mechanism != GSS_C_NULL_OID) &&
!g_OID_equal(gss_mech_krb5, mechanism) &&
!g_OID_equal(gss_mech_krb5_old, mechanism) &&
+ !g_OID_equal(gss_mech_krb5_wrong, mechanism) &&
!g_OID_equal(gss_mech_iakerb, mechanism)) {
*minor_status = 0;
return(GSS_S_BAD_MECH);
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5
