Skip Menu |
 

From: ghudson@mit.edu
Subject: git commit

Implement GSS_C_CHANNEL_BOUND_FLAG

Define a new channel-bound GSS return flag, and set it in the krb5
mech if the initiator sent channel bindings matching the acceptor's.
Do not error out if the acceptor specifies channel bindings and the
initiator does not send them.

[ghudson@mit.edu: simplified code changes; fleshed out commit message]

[iboukris: cherry-picked from another PR and reduced in scope]

https://github.com/krb5/krb5/commit/429a31146083fac21958631c2af572b08ec91022
Author: Alexander Scheel <ascheel@redhat.com>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: 429a31146083fac21958631c2af572b08ec91022
Branch: master
src/lib/gssapi/generic/gssapi_ext.h | 2 ++
src/lib/gssapi/krb5/accept_sec_context.c | 18 +++++++++++++-----
2 files changed, 15 insertions(+), 5 deletions(-)