X-RT-Interface: API Subject: git commit From: ghudson@mit.edu X-Mailer: MIME-tools 5.507 (Entity 5.507) Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: binary Content-Disposition: inline MIME-Version: 1.0 X-RT-Original-Encoding: ascii RT-Message-ID: Content-Length: 558 Restrict SPNEGO acceptor mechs by cred acquisition When the default cred is used, the SPNEGO initiator restricts the list of negotiable mechanisms to those we can acquire a cred for, so that we don't propose a mech we know can't work. The acceptor should do the same. https://github.com/krb5/krb5/commit/c088f56a62702a2cc99c26185681efee1555b7fa Author: Greg Hudson Commit: c088f56a62702a2cc99c26185681efee1555b7fa Branch: master src/lib/gssapi/spnego/spnego_mech.c | 12 ++++-------- 1 files changed, 4 insertions(+), 8 deletions(-)