[26345] in CVS-changelog-for-Kerberos-V5
svn rev #25682: branches/krb5-1-10/src/lib/gssapi/krb5/
daemon@ATHENA.MIT.EDU (tlyu@mit.edu)
Fri Feb 10 16:19:12 2012
Date: Fri, 10 Feb 2012 16:19:10 -0500
From: tlyu@mit.edu
Message-Id: <201202102119.q1ALJABv019917@drugstore.mit.edu>
To: cvs-krb5@mit.edu
Reply-To: krbdev@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cvs-krb5-bounces@mit.edu
http://src.mit.edu/fisheye/changelog/krb5/?cs=25682
Commit By: tlyu
Log Message:
ticket: 7084
version_fixed: 1.10.1
status: resolved
Pull up r25666 from trunk
------------------------------------------------------------------------
r25666 | ghudson | 2012-01-31 16:35:34 -0500 (Tue, 31 Jan 2012) | 12 lines
ticket: 7084
subject: Don't check mech in krb5_gss_inquire_cred_by_mech
target_version: 1.10.1
tags: pullup
krb5_gss_inquire_cred_by_mech checks its mech argument against two of
the four mechs a krb5 cred might have (the krb5 mech and the old krb5
mech, but not the wrong Microsoft mech or the IAKERB mech), so would
spuriously fail for the other two mechs. There is no reason to check
the mechanism if we assume a reasonable mechglue is interpreting
application gss_inquire_cred_by_mech calls, so just remove the check.
Changed Files:
U branches/krb5-1-10/src/lib/gssapi/krb5/inq_cred.c
Modified: branches/krb5-1-10/src/lib/gssapi/krb5/inq_cred.c
===================================================================
--- branches/krb5-1-10/src/lib/gssapi/krb5/inq_cred.c 2012-02-10 21:19:07 UTC (rev 25681)
+++ branches/krb5-1-10/src/lib/gssapi/krb5/inq_cred.c 2012-02-10 21:19:10 UTC (rev 25682)
@@ -224,16 +224,6 @@
OM_uint32 lifetime;
OM_uint32 mstat;
- /*
- * We only know how to handle our own creds.
- */
- if ((mech_type != GSS_C_NULL_OID) &&
- !g_OID_equal(gss_mech_krb5_old, mech_type) &&
- !g_OID_equal(gss_mech_krb5, mech_type)) {
- *minor_status = 0;
- return(GSS_S_NO_CRED);
- }
-
cred = (krb5_gss_cred_id_t) cred_handle;
mstat = krb5_gss_inquire_cred(minor_status,
cred_handle,
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5
