| commit | a57ec0c5df6665916ae761ef0bd3cccfe7538ea3 | |
| author | Stefan Becker <chemobejk@gmail.com> | |
| Sat, 7 Dec 2013 18:31:37 +0000 (7 20:31 +0200) | ||
| committer | Stefan Becker <chemobejk@gmail.com> | |
| Sat, 7 Dec 2013 18:31:37 +0000 (7 20:31 +0200) | ||
| tree | 663e6ae4a9ae10745d3269cec79e3581fbfb31b3 | treesnapshot (tar.gz zip) |
| parent | 958488e6f49d66ffd4ce8e6f5b5111b9c56ed9d6 | commitdiff |
security: set GSS_C_MUTUAL_FLAG only when required
We should not have to set GSS_C_MUTUAL_FLAG when we don't have to. But
unfortunately older Microsoft SPNEGO implementations send a final empty
packet that is not accepted by older MIT KRB5 implementations. Switch to
a runtime decision if we need the GSS_C_MUTUAL_FLAG workaround or not.
Added comments explaining the details for this workaround.
We should not have to set GSS_C_MUTUAL_FLAG when we don't have to. But
unfortunately older Microsoft SPNEGO implementations send a final empty
packet that is not accepted by older MIT KRB5 implementations. Switch to
a runtime decision if we need the GSS_C_MUTUAL_FLAG workaround or not.
Added comments explaining the details for this workaround.
| src/core/sip-sec-gssapi.c | diffblobblamehistory |