]> granicus.if.org Git - curl/commit
Don't abort Negotiate auth when the server has a response for us
authorDavid Woodhouse <David.Woodhouse@intel.com>
Fri, 11 Jul 2014 09:59:37 +0000 (10:59 +0100)
committerDaniel Stenberg <daniel@haxx.se>
Wed, 16 Jul 2014 15:26:08 +0000 (17:26 +0200)
commit6bc76194e8c56a7a06dc6bd2ba99e112321d49e3
tree9e6ed59d862d359e10c99e7554217966c39bc313
parentf78ae415d24b9bd89d6c121c556e411fdb21c6aa
Don't abort Negotiate auth when the server has a response for us

It's wrong to assume that we can send a single SPNEGO packet which will
complete the authentication. It's a *negotiation* — the clue is in the
name. So make sure we handle responses from the server.

Curl_input_negotiate() will already handle bailing out if it thinks the
state is GSS_S_COMPLETE (or SEC_E_OK on Windows) and the server keeps
talking to us, so we should avoid endless loops that way.
lib/http.c