gssapi: honor initiator credential in SPNEGO (#506)
commita7d42cdf6b057d21e40b87c6d526574c4d297807
authorLuke Howard <lukeh@padl.com>
Thu, 3 Jan 2019 12:16:03 +0000 (3 23:16 +1100)
committerLuke Howard <lukeh@padl.com>
Thu, 3 Jan 2019 12:25:30 +0000 (3 23:25 +1100)
tree95271babfd1a44fa048d6a12c456fe915a3f6d11
parent2242b5bc5b3ac4e5c7b7f324e069ab638814f4a8
gssapi: honor initiator credential in SPNEGO (#506)

SPNEGO uses the callback function initiator_approved() in order to determine
mechanism availability. Prior to this commit, is not passed in the initiator
credential, so it always uses a default credential. This breaks SPNEGO if a
non-default credential (such as one acquired with
gss_acquire_cred_with_password()) is used. This commit addresses this.
lib/gssapi/spnego/accept_sec_context.c
lib/gssapi/spnego/compat.c
lib/gssapi/spnego/init_sec_context.c