diff options
| author | Sam Hartman <hartmans@mit.edu> | 2004-06-08 21:50:17 +0000 |
|---|---|---|
| committer | Sam Hartman <hartmans@mit.edu> | 2004-06-08 21:50:17 +0000 |
| commit | 5077b49f9987945824bc53331f9eb033ac488ffc (patch) | |
| tree | 39b50f93c8ebd56c2b1528daeaca395783f9b2f1 /src/lib/gssapi/krb5/init_sec_context.c | |
| parent | e192e142304ff11c14ca89866f19ae0e6aa90c6c (diff) | |
| download | krb5-5077b49f9987945824bc53331f9eb033ac488ffc.zip krb5-5077b49f9987945824bc53331f9eb033ac488ffc.tar.gz krb5-5077b49f9987945824bc53331f9eb033ac488ffc.tar.bz2 | |
Patch from kwc@citi.umich.edu to support
gss_krb5_export_lucid_sec_context and other facilities for NFSv4
implementations.
In order to apply this patch gss_krb5.h needs to be auto-generated so we can expose a 64-bit type for sequence numbers.
Ticket: 2587
status: open
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16423 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/lib/gssapi/krb5/init_sec_context.c')
| -rw-r--r-- | src/lib/gssapi/krb5/init_sec_context.c | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/src/lib/gssapi/krb5/init_sec_context.c b/src/lib/gssapi/krb5/init_sec_context.c index 48015cc..63a9cb9 100644 --- a/src/lib/gssapi/krb5/init_sec_context.c +++ b/src/lib/gssapi/krb5/init_sec_context.c @@ -497,6 +497,15 @@ new_connection( goto fail; krb5_auth_con_setflags(context, ctx->auth_context, KRB5_AUTH_CONTEXT_DO_SEQUENCE); + + /* limit the encryption types negotiated (if requested) */ + if (cred->req_enctypes) { + if ((code = krb5_set_default_tgs_enctypes(context, + cred->req_enctypes))) { + goto fail; + } + } + ctx->initiate = 1; ctx->gss_flags = (GSS_C_INTEG_FLAG | GSS_C_CONF_FLAG | GSS_C_TRANS_FLAG | |