oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Remove GSS_C_EXPECTING_MECH_LIST_MIC_FLAG, it is no longer in rfc2478bis

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@14584 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Luke Howard
2005-02-21 08:48:15 +00:00
parent 1d02386069
commit 244ca04320
8 changed files with 40 additions and 52 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
lib/gssapi/krb5/compat.c
View File

@@ -124,8 +124,7 @@ gss_krb5_compat_des3_mic(OM_uint32 *minor_status, gss_ctx_id_t ctx, int on)
/*
* For compatability with the Windows SPNEGO implementation, the
* default is to ignore the mechListMIC unless the initiator specified
* GSS_C_EXPECTING_MECH_LIST_MIC_FLAG, CFX or configured in krb5.conf
* with the option
* CFX or configured in krb5.conf with the option
* [gssapi]require_mechlist_mic=target-principal-pattern.
* The option is valid for both initiator and acceptor.
*/
@@ -137,22 +136,17 @@ _gss_spnego_require_mechlist_mic(OM_uint32 *minor_status,
OM_uint32 ret;
int is_cfx = 0;
if (ctx->flags & GSS_C_EXPECTING_MECH_LIST_MIC_FLAG) {
/* initiator insisted on mechListMIC */
gsskrb5_is_cfx(ctx, &is_cfx);
if (is_cfx) {
/* CFX session key was used */
*require_mic = TRUE;
} else {
gsskrb5_is_cfx(ctx, &is_cfx);
if (is_cfx) {
/* CFX session key was used */
*require_mic = TRUE;
} else {
*require_mic = FALSE;
ret = check_compat(minor_status, ctx->target,
"require_mechlist_mic",
require_mic, TRUE);
if (ret)
return ret;
}
*require_mic = FALSE;
ret = check_compat(minor_status, ctx->target,
"require_mechlist_mic",
require_mic, TRUE);
if (ret)
return ret;
}
*minor_status = 0;
return GSS_S_COMPLETE;