Skip Menu |

Subject: krb5 gss_inquire_context doesn't work with partially established context
RFC 2744 section 5.20 states "The caller must already have obtained a
handle that refers to the context, although the context need not be fully
established." But krb5_gss_inquire_context errors out with
GSS_S_NO_CONTEXT/KG_CTX_INCOMPLETE if the context is not established. It
shouldn't have this restriction.
Subject: git commit
Download (untitled) / with headers
text/plain 1.2KiB

Allow gss_inquire_context on partial krb5 contexts

RFC 2743 states that gss_inquire_context() must always return flags,
locally_initiated, and open even if a context is not yet fully
established. Additionally, a partially established context may also
return mech_type.

Previously, the krb5 mech raised an error for inquire_context on
partially completed contexts. It now follows the rules layed out in
RFC 2743.

Add a new test program to verify that gss_inquire_context() works
correctly on both in-progress and established contexts.

[ minor style changes and commit message edits]
Author: Solly Ross <>
Committer: Greg Hudson <>
Commit: 9f095e1aab582e5a94c93d587f6d09e9d8f7479e
Branch: master
.gitignore | 1 +
src/lib/gssapi/krb5/inq_context.c | 90 ++++++++++++---------
src/lib/gssapi/mechglue/g_inq_context.c | 5 +-
src/tests/gssapi/ | 17 +++--
src/tests/gssapi/ | 4 +
src/tests/gssapi/t_inq_ctx.c | 131 +++++++++++++++++++++++++++++++
6 files changed, 202 insertions(+), 46 deletions(-)