Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.427 (Entity 5.427)
From: ghudson@mit.edu
Subject: git commit
X-RT-Original-Encoding: iso-8859-1
Content-Length: 679


Fix GSS krb5 GSS_C_DELEG_FLAG ret_flags result

The krb5 gss_accept_sec_context could erroneously return
GSS_C_DELEG_FLAG in ret_flags if either:

* The token included the GSS_C_DELEG_FLAG but did not include at least
  28 bytes in the authenticator checksum.
* The initial token included the GSS_C_DELEG_FLAG but a DCE-style
  exchange was performed.

Fix both of these cases.

https://github.com/krb5/krb5/commit/d899084e24555dc8fd091eb08187ca2a45a08324
Author: Greg Hudson <ghudson@mit.edu>
Commit: d899084e24555dc8fd091eb08187ca2a45a08324
Branch: master
 src/lib/gssapi/krb5/accept_sec_context.c |   19 ++++++++++---------
 1 files changed, 10 insertions(+), 9 deletions(-)