Is GSS_C_INTEG_FLAG required for calling gss_wrap/unwrap
Isaac Boukris <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.devel |
|---|---|
| Message-ID | <CAC-fF8SbJbEg=8gX2JhzN0wwTCfjA1Dud0hOWMnqqzEn9WyN8A@mail.gmail.com> |
Hi, According to RFC 2274, GSS_C_INTEG_FLAG: True - Integrity service may be invoked by calling either gss_get_mic or gss_wrap routines. But per my testing even with GSS_KRB5_CRED_NO_CI_FLAGS_X and not asking for GSS_C_INTEG_FLAG (integ/conf are false in ap-req), both parties are able to call gss_wrap/unwrap (windows server), is that expected? Thanks _______________________________________________ krbdev mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/krbdev