Drop delegated creds when target is NULL
commitfca6363307d03a7c80ad201f17f5d357b794c4e9
authorViktor Dukhovni <viktor@twosigma.com>
Wed, 4 Mar 2015 02:38:09 +0000 (4 02:38 +0000)
committerViktor Dukhovni <viktor@dukhovni.org>
Tue, 10 Mar 2015 03:07:29 +0000 (10 03:07 +0000)
tree7444e86b64af99ed6c7ed30855f9ab24fc8fdb54
parentca052eadd5590e9d7feafc2b7b805a2e1c577c92
Drop delegated creds when target is NULL

In gsskrb5_accept_delegated_token() it is wrong to store the delegated
credentials in the default ccache by default.  When the caller does not
provide a target credential handle, we just do nothing and return success.

Test the return value of gsskrb5_accept_delegated_token() against
GSS_S_COMPLETE, rather than 0.
lib/gssapi/krb5/accept_sec_context.c