summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--source4/auth/gensec/gensec_gssapi.c7
1 files changed, 5 insertions, 2 deletions
diff --git a/source4/auth/gensec/gensec_gssapi.c b/source4/auth/gensec/gensec_gssapi.c
index 8ee0c18208..9809a1b408 100644
--- a/source4/auth/gensec/gensec_gssapi.c
+++ b/source4/auth/gensec/gensec_gssapi.c
@@ -96,7 +96,9 @@ static NTSTATUS gensec_gssapi_start(struct gensec_security *gensec_security)
if (gensec_security->want_features & GENSEC_FEATURE_SESSION_KEY) {
#ifndef HAVE_GSSKRB5_GET_INITIATOR_SUBKEY
- /* GSSAPI won't give us the session keys, without the right hook */
+ /* GSSAPI won't give us the session keys, without the
+ * right hooks. This is critical when requested, so
+ * fail outright. */
return NT_STATUS_INVALID_PARAMETER;
#endif
}
@@ -108,7 +110,8 @@ static NTSTATUS gensec_gssapi_start(struct gensec_security *gensec_security)
}
if (gensec_security->want_features & GENSEC_FEATURE_DCE_STYLE) {
#ifndef GSS_C_DCE_STYLE
- /* GSSAPI won't give us the session keys, without the right hook */
+ /* GSSAPI DCE_STYLE is critical when requested, so
+ * fail outright */
return NT_STATUS_INVALID_PARAMETER;
#else
gensec_gssapi_state->want_flags |= GSS_C_DCE_STYLE;