Fix gss_inquire_names_for_mech() on MS krb5 mech
authorTomas Kuthan <tkuthan@gmail.com>
Wed, 30 Sep 2015 13:24:24 +0000 (15:24 +0200)
committerGreg Hudson <ghudson@mit.edu>
Wed, 30 Sep 2015 20:07:04 +0000 (16:07 -0400)
Allow the krb5 mech to query names for the gss_mech_krb5_wrong OID
(the erroneous OID used in old Microsoft SPNEGO implementations).

[ghudson@mit.edu: edit commit message]

ticket: 8257 (new)
target_version: 1.14
tags: pullup

src/lib/gssapi/krb5/inq_names.c

index fcf7dbcd3a5c501f3958c5a21352a0684ac49484..b326adbb5f233e0ac8ddf5606064a264fdb2a595 100644 (file)
@@ -40,6 +40,7 @@ krb5_gss_inquire_names_for_mech(minor_status, mechanism, name_types)
     if ((mechanism != GSS_C_NULL_OID) &&
         !g_OID_equal(gss_mech_krb5, mechanism) &&
         !g_OID_equal(gss_mech_krb5_old, mechanism) &&
+        !g_OID_equal(gss_mech_krb5_wrong, mechanism) &&
         !g_OID_equal(gss_mech_iakerb, mechanism)) {
         *minor_status = 0;
         return(GSS_S_BAD_MECH);