diff options
| -rw-r--r-- | source4/auth/gensec/gensec_gssapi.c | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/source4/auth/gensec/gensec_gssapi.c b/source4/auth/gensec/gensec_gssapi.c index 8ee0c18208..9809a1b408 100644 --- a/source4/auth/gensec/gensec_gssapi.c +++ b/source4/auth/gensec/gensec_gssapi.c @@ -96,7 +96,9 @@ static NTSTATUS gensec_gssapi_start(struct gensec_security *gensec_security) if (gensec_security->want_features & GENSEC_FEATURE_SESSION_KEY) { #ifndef HAVE_GSSKRB5_GET_INITIATOR_SUBKEY - /* GSSAPI won't give us the session keys, without the right hook */ + /* GSSAPI won't give us the session keys, without the + * right hooks. This is critical when requested, so + * fail outright. */ return NT_STATUS_INVALID_PARAMETER; #endif } @@ -108,7 +110,8 @@ static NTSTATUS gensec_gssapi_start(struct gensec_security *gensec_security) } if (gensec_security->want_features & GENSEC_FEATURE_DCE_STYLE) { #ifndef GSS_C_DCE_STYLE - /* GSSAPI won't give us the session keys, without the right hook */ + /* GSSAPI DCE_STYLE is critical when requested, so + * fail outright */ return NT_STATUS_INVALID_PARAMETER; #else gensec_gssapi_state->want_flags |= GSS_C_DCE_STYLE; |