SPNEGO uses the callback function acceptor_approved() in order to determine which mechanisms to advertise to the initiator in the case that the initiator sent an empty initial context token. Prior to this commit, that function was not passed in the acceptor credential (if present), so always uses a default credential. For correctness, we should only advertise the availability of mechanisms for which we have a credential.
23 KiB
23 KiB