Skip Menu |

Subject: git commit


Define a new channel-bound GSS return flag, and set it in the krb5
mech if the initiator sent channel bindings matching the acceptor's.
Do not error out if the acceptor specifies channel bindings and the
initiator does not send them.

[ simplified code changes; fleshed out commit message]

[iboukris: cherry-picked from another PR and reduced in scope]
Author: Alexander Scheel <>
Committer: Greg Hudson <>
Commit: 429a31146083fac21958631c2af572b08ec91022
Branch: master
src/lib/gssapi/generic/gssapi_ext.h | 2 ++
src/lib/gssapi/krb5/accept_sec_context.c | 18 +++++++++++++-----
2 files changed, 15 insertions(+), 5 deletions(-)