Skip to content

Commit 4a764f4

Browse files
committed
Add support for GSS_C_CHANNEL_BOUND_FLAG
MIT krb5 version 1.19 will set GSS_C_CHANNEL_BOUND_FLAG when channel binding succeeds. This will cause gssapi to fail with the error message: ValueError: 2048 is not a valid RequirementFlag Add support for GSS_C_CHANNEL_BOUND_FLAG to fix this.
1 parent 737330b commit 4a764f4

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

gssapi/raw/types.pyx

+4
Original file line numberDiff line numberDiff line change
@@ -62,6 +62,10 @@ class RequirementFlag(IntEnum, metaclass=ExtendableEnum):
6262
# support it will ignore it.
6363
ok_as_delegate = 32768
6464

65+
# GSS_C_CHANNEL_BOUND_FLAG, implemented in MIT krb5-1.19
66+
# See https://datatracker.ietf.org/doc/html/draft-ietf-kitten-channel-bound-flag-04
67+
channel_bound = 2048
68+
6569

6670
class AddressType(IntEnum, metaclass=ExtendableEnum):
6771
"""

0 commit comments

Comments
 (0)