= Create a cache for delegated credentials when needed.

= Return GSS_S_BAD_BINDINGS when appropriate, and otherwise
  tweak the return value handling in gss_accept_sec_context
  to be sure they are set to something reasonable.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10582 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Jacques A. Vidrine
2001-08-28 18:59:37 +00:00
parent 2639d758e1
commit c14ed9002f
4 changed files with 104 additions and 64 deletions

View File

@@ -166,15 +166,15 @@ gssapi_krb5_verify_8003_checksum(
p = cksum->checksum.data;
decode_om_uint32(p, &length);
if(length != sizeof(hash))
return GSS_S_FAILURE;
return GSS_S_BAD_BINDINGS;;
p += 4;
if (input_chan_bindings != GSS_C_NO_CHANNEL_BINDINGS) {
if(hash_input_chan_bindings(input_chan_bindings, hash) != 0)
return GSS_S_FAILURE;
return GSS_S_BAD_BINDINGS;
if(memcmp(hash, p, sizeof(hash)) != 0)
return GSS_S_FAILURE;
return GSS_S_BAD_BINDINGS;
}
p += sizeof(hash);