search

cyrusimap / cyrus-sasl

Other
134 stars 151 forks source link

Allow SASL_SEC_NONSTD_CBIND flag in GSSAPI and GSS-SPNEGO #862

Closed scabrero closed 2 months ago

scabrero commented 2 months ago

Commit 8735185e9d5550e0f11e1ce4b77e391a16e4145b introduced this new flag to enable channel bindings on mechs not supposed to support them, but setting it results in an empty mech list due to plugin's security_flags check in sasl_client_start():

https://github.com/cyrusimap/cyrus-sasl/blob/master/lib/client.c#L809

Allow this flag in GSSAPI and GSS-SPNEGO plugins.