Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

No way to change context flags for SPNEGO's AP REQ #541

Open
Macmod opened this issue Apr 2, 2024 · 0 comments
Open

No way to change context flags for SPNEGO's AP REQ #541

Macmod opened this issue Apr 2, 2024 · 0 comments

Comments

@Macmod
Copy link

Macmod commented Apr 2, 2024

SPNEGO's InitSecContext in spnego.go references NewNegTokenInitKRB5 from negotiationToken.go, which always generates a NegTokenInit from NewKRB5TokenAPREQ with ContextFlags gssapi.ContextFlagInteg and gssapi.ContextFlagConf.

I have an issue in which Active Directory doesn't provide replies to LDAP searches (they just timeout) after a successful bind with GSS-SPNEGO whenever these flags are set, but it works fine when they are not set. I'd like to turn off these flags but haven't found a way to do so within the library. Unless these ContextFlags are mandatory by some RFC shouldn't it be up to the implementor to decide which flags to include in the request?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant