Break out of processing upon GSS error being reported. gssweb-apache
authorMark Donnelly <mark@painless-security.com>
Mon, 12 Jan 2015 15:58:08 +0000 (10:58 -0500)
committerMark Donnelly <mark@painless-security.com>
Mon, 12 Jan 2015 15:58:08 +0000 (10:58 -0500)
The module was returning success upon GSS reporting a failure, so the
normal processing needs to be aborted and an error returned.

mod_auth_gssweb.c

index b3e8360..c4ef117 100644 (file)
@@ -485,6 +485,7 @@ gssweb_authenticate_user(request_rec *r)
            "%s", get_gss_error(r, major_status, minor_status,
                                "gssweb_authenticate_user: Failed to establish authentication"));
     conn_ctx->state = GSS_CTX_FAILED;
+    goto end;
   }
 
   /* If there was no token returned, clear token from context and exit */