Restrict SPNEGO acceptor mechs by cred acquisition When the default cred is used, the SPNEGO initiator restricts the list of negotiable mechanisms to those we can acquire a cred for, so that we don't propose a mech we know can't work. The acceptor should do the same. https://github.com/krb5/krb5/commit/c088f56a62702a2cc99c26185681efee1555b7fa Author: Greg Hudson Commit: c088f56a62702a2cc99c26185681efee1555b7fa Branch: master src/lib/gssapi/spnego/spnego_mech.c | 12 ++++-------- 1 files changed, 4 insertions(+), 8 deletions(-)