10be6a75c4
There were cases where we weren't negotiating SANON where we should have. But we really don't want to overdo it. In particular we really never ever want a user with expired or absent Kerberos credentials (say) to accidentally negotiate SANON as that will then lead to authorization errors down the line, and those would be hard to diagnose as they would be masking the real issue (expired or absent credentials). So basically either the user passes GSS_C_ANON_FLAG or (and/or) they call gss_set_neg_mechs() to explicitly request SANON. Partly authored by me, partly authored by Claude with heavy human guidance, and reviewed by me.
Heimdal
Heimdal is an implementation of:
- ASN.1/DER,
- PKIX, and
- Kerberos.
For information how to install see here.
There are man pages for most of the commands.
Bug reports and bugs are appreciated. Use GitHub issues.
For more information see the project homepage https://heimdal.software/heimdal/ or the mailing lists:
heimdal-announce@heimdal.software low-volume announcement heimdal-discuss@heimdal.software high-volume discussion
send mail to heimdal-announce-subscribe@heimdal.software and heimdal-discuss-subscribe@heimdal.software respectively to subscribe.
Build Status