[29194] in CVS-changelog-for-Kerberos-V5
krb5 commit [krb5-1.12]: Fix gss_inquire_names_for_mech() on MS krb5
daemon@ATHENA.MIT.EDU (Tom Yu)
Thu Dec 10 18:17:18 2015
Date: Thu, 10 Dec 2015 18:14:43 -0500
From: Tom Yu <tlyu@mit.edu>
Message-Id: <201512102314.tBANEhdw003445@drugstore.mit.edu>
To: cvs-krb5@mit.edu
Reply-To: krbdev@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cvs-krb5-bounces@mit.edu
https://github.com/krb5/krb5/commit/a8c8b08c215f4494c8590e9ebfb9eebb8cfd56b4
commit a8c8b08c215f4494c8590e9ebfb9eebb8cfd56b4
Author: Tomas Kuthan <tkuthan@gmail.com>
Date: Wed Sep 30 15:24:24 2015 +0200
Fix gss_inquire_names_for_mech() on MS krb5 mech
Allow the krb5 mech to query names for the gss_mech_krb5_wrong OID
(the erroneous OID used in old Microsoft SPNEGO implementations).
[ghudson@mit.edu: edit commit message]
(cherry picked from commit 95736f7d51cce7551c3c20450ff56831a71043df)
ticket: 8324 (new)
version_fixed: 1.12.5
status: resolved
src/lib/gssapi/krb5/inq_names.c | 1 +
1 files changed, 1 insertions(+), 0 deletions(-)
diff --git a/src/lib/gssapi/krb5/inq_names.c b/src/lib/gssapi/krb5/inq_names.c
index fcf7dbc..b326adb 100644
--- a/src/lib/gssapi/krb5/inq_names.c
+++ b/src/lib/gssapi/krb5/inq_names.c
@@ -40,6 +40,7 @@ krb5_gss_inquire_names_for_mech(minor_status, mechanism, name_types)
if ((mechanism != GSS_C_NULL_OID) &&
!g_OID_equal(gss_mech_krb5, mechanism) &&
!g_OID_equal(gss_mech_krb5_old, mechanism) &&
+ !g_OID_equal(gss_mech_krb5_wrong, mechanism) &&
!g_OID_equal(gss_mech_iakerb, mechanism)) {
*minor_status = 0;
return(GSS_S_BAD_MECH);
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5
