+#define MAX_ALLOWED_MECHS 10
+
+static const char *mag_allow_mech(cmd_parms *parms, void *mconfig,
+ const char *w)
+{
+ struct mag_config *cfg = (struct mag_config *)mconfig;
+ gss_const_OID oid;
+ size_t size;
+
+ if (!cfg->allowed_mechs) {
+ cfg->allowed_mechs = apr_pcalloc(parms->pool,
+ sizeof(gss_OID_set_desc));
+ size = sizeof(gss_OID) * MAX_ALLOWED_MECHS;
+ cfg->allowed_mechs->elements = apr_palloc(parms->pool, size);
+ }
+
+ if (strcmp(w, "krb5") == 0) {
+ oid = gss_mech_krb5;
+ } else if (strcmp(w, "iakerb") == 0) {
+ oid = gss_mech_iakerb;
+ } else if (strcmp(w, "ntlmssp") == 0) {
+ oid = &gss_mech_ntlmssp;
+ } else {
+ ap_log_error(APLOG_MARK, APLOG_ERR, 0, parms->server,
+ "Unrecognized GSSAPI Mechanism: %s", w);
+ return NULL;
+ }
+
+ if (cfg->allowed_mechs->count >= MAX_ALLOWED_MECHS) {
+ ap_log_error(APLOG_MARK, APLOG_ERR, 0, parms->server,
+ "Too many GssapiAllowedMech options (MAX: %d)",
+ MAX_ALLOWED_MECHS);
+ return NULL;
+ }
+ cfg->allowed_mechs->elements[cfg->allowed_mechs->count] = *oid;
+ cfg->allowed_mechs->count++;
+
+ return NULL;
+}
+