search for: gss_unwrap

...ro-length continuation response, but this is incorrect according to RFC 4752: what it ought to do instead is proceed straight to the security layer negotiations, and send a gss_wrap packet. The second is that Cyrus sends an empty authz identity; that is, the security layer negotiation packet, when gss_unwrapped, is exactly 4 bytes long. Dovecot objects to this, but in RFC 4422 this is explicitly allowed, and means the authz identity is identical to the authn identity. I believe the attached patches (for the 1.2 and 2.1 branches) fix the problem, though I'm not entirely sure if the difference betwe...

...atus = gss_release_buffer(&minor_status, &outbuf); + + request->sasl_gssapi_state = GSS_STATE_UNWRAP; +} + +static void gssapi_unwrap(struct gssapi_auth_request *request, + gss_buffer_desc inbuf) +{ + OM_uint32 major_status, minor_status; + gss_buffer_desc outbuf; + + major_status = gss_unwrap(&minor_status, request->gss_ctx, + &inbuf, &outbuf, NULL, NULL); + + if (GSS_ERROR(major_status)) { + auth_request_log_gss_error(&request->auth_request, major_status, GSS_C_GSS_CODE, + "final negotiation: gss_unwrap"); + auth_request_fail(&request-...

...c Compiling heimdal/lib/gssapi/mech/gss_import_sec_context.c Compiling heimdal/lib/gssapi/mech/gss_inquire_cred.c Compiling heimdal/lib/gssapi/mech/gss_wrap.c Compiling heimdal/lib/gssapi/mech/gss_import_name.c Compiling heimdal/lib/gssapi/mech/gss_duplicate_name.c Compiling heimdal/lib/gssapi/mech/gss_unwrap.c Compiling heimdal/lib/gssapi/mech/gss_export_sec_context.c Compiling heimdal/lib/gssapi/mech/gss_inquire_context.c heimdal/lib/gssapi/mech/gss_inquire_context.c: In function ?gss_inquire_context?: heimdal/lib/gssapi/mech/gss_inquire_context.c:40: warning: declaration of ?open? shadows a global de...