[16243] in Kerberos-V5-bugs

home help back first fref pref prev next nref lref last post

[krbdev.mit.edu #8775] git commit

daemon@ATHENA.MIT.EDU (Greg Hudson via RT)
Wed Feb 6 15:10:27 2019

Mail-followup-to: rt@krbdev.mit.edu
mail-copies-to: never
From: Greg Hudson via RT <rt-comment@KRBDEV-PROD-APP-1.mit.edu>
In-Reply-To: <rt-8775@krbdev.mit.edu>
Message-ID: <rt-8775-49289.6.91042298062051@krbdev.mit.edu>
To: "'AdminCc of krbdev.mit.edu Ticket #8775'":;
Date: Wed, 6 Feb 2019 15:10:22 -0500
MIME-Version: 1.0
Reply-To: rt-comment@KRBDEV-PROD-APP-1.mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu


Process SPNEGO error tokens through mech

In the SPNEGO initiator code, if the acceptor returns a token with
negState=REJCET and a mechanism token, process the token through the
mech to get a better error status.

[ghudson@mit.edu: modified approach for clarity and to prevent some
edge cases; rewrote commit message]

https://github.com/krb5/krb5/commit/51d3f2ab706197bf8fea82e0a7e9c877d6563986
Author: Luke Howard <lukeh@padl.com>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: 51d3f2ab706197bf8fea82e0a7e9c877d6563986
Branch: master
 src/lib/gssapi/spnego/spnego_mech.c |   48 +++++++++++++++++++++++-----------
 src/tests/gssapi/t_err.c            |   11 ++++++--
 src/tests/gssapi/t_gssapi.py        |    1 +
 3 files changed, 41 insertions(+), 19 deletions(-)

_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs

home help back first fref pref prev next nref lref last post