assert(maj_stat == GSS_S_COMPLETE);
- if ((out_flags & GSS_C_SEQUENCE_FLAG) == 0) {
- ret = SASL_BADAUTH;
- goto cleanup;
- }
-
maj_stat = gss_display_name(&min_stat, text->client_name,
&name_buf, NULL);
if (GSS_ERROR(maj_stat))
gss_buffer_desc output_token = GSS_C_EMPTY_BUFFER;
gss_buffer_desc name_buf = GSS_C_EMPTY_BUFFER;
OM_uint32 maj_stat = GSS_S_FAILURE, min_stat = 0;
- OM_uint32 req_flags, ret_flags;
+ OM_uint32 ret_flags;
int ret = SASL_FAIL;
int initialContextToken;
goto cleanup;
}
- req_flags = GSS_C_MUTUAL_FLAG | GSS_C_SEQUENCE_FLAG;
-
maj_stat = gss_init_sec_context(&min_stat,
(params->gss_creds != GSS_C_NO_CREDENTIAL)
? (gss_cred_id_t)params->gss_creds
&text->gss_ctx,
text->server_name,
(gss_OID)text->mechanism,
- req_flags,
+ GSS_C_MUTUAL_FLAG,
GSS_C_INDEFINITE,
&text->gss_cbindings,
serverinlen ? &input_token : GSS_C_NO_BUFFER,
if (GSS_ERROR(maj_stat))
goto cleanup;
- if ((ret_flags & req_flags) != req_flags) {
+#if 0
+ if ((ret_flags & GSS_C_MUTUAL_FLAG) == 0) {
maj_stat = SASL_BADAUTH;
goto cleanup;
}
+#endif
maj_stat = gss_display_name(&min_stat,
text->client_name,
static int gs2_indicate_mechs(const sasl_utils_t *utils)
{
OM_uint32 major, minor;
- gss_OID_desc desired_oids[3];
+ gss_OID_desc desired_oids[2];
gss_OID_set_desc desired_attrs;
gss_OID_desc except_oids[3];
gss_OID_set_desc except_attrs;
return SASL_OK;
desired_oids[0] = *GSS_C_MA_AUTH_INIT;
- desired_oids[1] = *GSS_C_MA_AUTH_TARG;
- desired_oids[2] = *GSS_C_MA_CBINDINGS;
+ desired_oids[1] = *GSS_C_MA_CBINDINGS;
desired_attrs.count = sizeof(desired_oids)/sizeof(desired_oids[0]);
desired_attrs.elements = desired_oids;