gss: avoid showing PAC in test_context if anon
The Heimdal KDC does not add a PAC if an anonymous ticket was issued. As such, test_context should not expect PAC naming attributes to be present if the --anonymous option was passed. (This is irrelevant for now as GSS_C_ANON_FLAG is not honored by the krb5 mechanism.)
This commit is contained in:
@@ -499,7 +499,8 @@ loop(gss_OID mechoid,
|
|||||||
} else
|
} else
|
||||||
warnx("display_name: %s",
|
warnx("display_name: %s",
|
||||||
gssapi_err(maj_stat, min_stat, GSS_C_NO_OID));
|
gssapi_err(maj_stat, min_stat, GSS_C_NO_OID));
|
||||||
if (gss_oid_equal(actual_mech_server, GSS_KRB5_MECHANISM))
|
if (!anon_flag &&
|
||||||
|
gss_oid_equal(actual_mech_server, GSS_KRB5_MECHANISM))
|
||||||
show_pac_client_info(src_name);
|
show_pac_client_info(src_name);
|
||||||
}
|
}
|
||||||
gss_release_name(&min_stat, &src_name);
|
gss_release_name(&min_stat, &src_name);
|
||||||
|
Reference in New Issue
Block a user