[3954] in Kerberos-V5-bugs
[krbdev.mit.edu #1352] kg_seal should check GSS_C_PROT_READY_FLAG
daemon@ATHENA.MIT.EDU (via RT)
Fri Feb 21 15:46:16 2003
Date: Fri, 21 Feb 2003 15:45:09 -0500 (EST)
Mail-Followup-To: rt@krbdev.mit.edu
Message-Id: <rt-1352-4615.6.66737572936597@krbdev.mit.edu>
In-Reply-To: <rt-1352@krbdev.mit.edu>
From: " via RT" <rt-comment@krbdev.mit.edu>
Mail-Copies-To: never
To: wyllys.ingersoll@sun.com
cc: krb5-prs@mit.edu
Reply-To: rt-comment@krbdev.mit.edu
Errors-To: krb5-bugs-bounces@mit.edu
[guest - Fri Feb 21 15:32:22 2003]:
> [hartmans - Fri Feb 21 15:24:02 2003]:
> > I'd agree with you except that this is fairly clearly prohibited by
> > section 3.2.2 of the RFC. I suspect SPNEGO predates prot-ready.
>
> Sam, you are correct, I had not noticed that. HOWEVER, the MIT code
> seems to want to support PROT_READY, but the support is not complete
> and that is what this bug report is about. Regardless of the SPNEGO
> issue, the fact is that the MIT krb5 does not support PROT_READY
> correctly.
>
> Nico
Oh, RFC1964 too predates GSS-APIv2. Sigh.
Nico
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
http://mailman.mit.edu/mailman/listinfo/krb5-bugs
