• Trond Myklebust's avatar
    SUNRPC: Always match an upcall message in gss_pipe_downcall() · 3b68aaea
    Trond Myklebust authored
    It used to be possible for an rpc.gssd daemon to stuff the RPC credential
    cache for any rpc client simply by creating RPCSEC_GSS contexts and then
    doing downcalls. In practice, no daemons ever made use of this feature.
    
    Remove this feature now, since it will be impossible to figure out which
    mechanism a given context actually matches if we enable more
    than one gss mechanism to use the same upcall pipe.
    Signed-off-by: default avatarTrond Myklebust <Trond.Myklebust@netapp.com>
    3b68aaea
auth_gss.c 32.5 KB