gss: avoid showing PAC in test_context if anon

The Heimdal KDC does not add a PAC if an anonymous ticket was issued. As such,
test_context should not expect PAC naming attributes to be present if the
--anonymous option was passed. (This is irrelevant for now as GSS_C_ANON_FLAG
is not honored by the krb5 mechanism.)
This commit is contained in:
Luke Howard
2022-01-08 10:12:07 +11:00
parent 402884a310
commit 27d62bb27e

View File

@@ -499,7 +499,8 @@ loop(gss_OID mechoid,
} else } else
warnx("display_name: %s", warnx("display_name: %s",
gssapi_err(maj_stat, min_stat, GSS_C_NO_OID)); gssapi_err(maj_stat, min_stat, GSS_C_NO_OID));
if (gss_oid_equal(actual_mech_server, GSS_KRB5_MECHANISM)) if (!anon_flag &&
gss_oid_equal(actual_mech_server, GSS_KRB5_MECHANISM))
show_pac_client_info(src_name); show_pac_client_info(src_name);
} }
gss_release_name(&min_stat, &src_name); gss_release_name(&min_stat, &src_name);