s4:gensec/spnego: only look at the optimistic token if we support the first mech
commitf126cb9eeace9d3ad277c333fe9dfac17153d264
authorStefan Metzmacher <metze@samba.org>
Wed, 1 Dec 2010 06:02:15 +0000 (1 07:02 +0100)
committerStefan Metzmacher <metze@samba.org>
Tue, 14 Dec 2010 15:50:49 +0000 (14 16:50 +0100)
tree931b859579bf36627c4508559345bb3d26019d29
parent4fd57cbe1ba35d3b3deb01b2eb6aba1d0aa4ddfd
s4:gensec/spnego: only look at the optimistic token if we support the first mech

As a server only try the mechs the client proposed
and only call gensec_update() with the optimistic token
for the first mech in the list.

If the server doesn't support the first mech we pick the
first one in the clients list we also support.
That's how w2k8r2 works.

metze

Autobuild-User: Stefan Metzmacher <metze@samba.org>
Autobuild-Date: Tue Dec 14 16:50:50 CET 2010 on sn-devel-104
source4/auth/gensec/spnego.c