gss: avoid showing PAC in test_context if anon
The Heimdal KDC does not add a PAC if an anonymous ticket was issued. As such, test_context should not expect PAC naming attributes to be present if the --anonymous option was passed. (This is irrelevant for now as GSS_C_ANON_FLAG is not honored by the krb5 mechanism.)
This commit is contained in:
@@ -499,7 +499,8 @@ loop(gss_OID mechoid,
|
||||
} else
|
||||
warnx("display_name: %s",
|
||||
gssapi_err(maj_stat, min_stat, GSS_C_NO_OID));
|
||||
if (gss_oid_equal(actual_mech_server, GSS_KRB5_MECHANISM))
|
||||
if (!anon_flag &&
|
||||
gss_oid_equal(actual_mech_server, GSS_KRB5_MECHANISM))
|
||||
show_pac_client_info(src_name);
|
||||
}
|
||||
gss_release_name(&min_stat, &src_name);
|
||||
|
Reference in New Issue
Block a user