Skip to content

Commit 9c555e2

Browse files
alejandro-perezsimo5
authored andcommitted
Pass GSS_C_NO_OID as the mechanism to gss_localname.
Passing the actual mechanism name does not work as expected with SPNEGO-wrapped names. More details in http://krbdev.mit.edu/rt/Ticket/Display.html?id=8782 Signed-off-by: Alejandro Perez <alex.perez-mendez@jisc.ac.uk>
1 parent 6aa0a5b commit 9c555e2

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

src/mod_auth_gssapi.c

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1271,7 +1271,11 @@ static int mag_complete(struct mag_req_cfg *req_cfg, struct mag_conn *mc,
12711271
#endif
12721272

12731273
if (cfg->map_to_local) {
1274-
maj = gss_localname(&min, client, mech_type, &lname);
1274+
/* We pass GSS_C_NO_OID here as passing mech_type does not work
1275+
* as expected with SPNEGO-wrapped names.
1276+
* http://krbdev.mit.edu/rt/Ticket/Display.html?id=8782
1277+
*/
1278+
maj = gss_localname(&min, client, GSS_C_NO_OID, &lname);
12751279
if (maj != GSS_S_COMPLETE) {
12761280
mag_post_error(req, cfg, MAG_GSS_ERR, maj, min,
12771281
"gss_localname() failed");

0 commit comments

Comments
 (0)