[krbdev.mit.edu #8844] git commit
"Greg Hudson via RT" <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.bugs |
|---|---|
| Message-ID | <[email protected]> |
<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=8844 > Restrict SPNEGO acceptor mechs by cred acquisition When the default cred is used, the SPNEGO initiator restricts the list of negotiable mechanisms to those we can acquire a cred for, so that we don't propose a mech we know can't work. The acceptor should do the same. https://github.com/krb5/krb5/commit/c088f56a62702a2cc99c26185681efee1555b7fa Author: Greg Hudson <[email protected]> Commit: c088f56a62702a2cc99c26185681efee1555b7fa Branch: master src/lib/gssapi/spnego/spnego_mech.c | 12 ++++-------- 1 files changed, 4 insertions(+), 8 deletions(-)