Michał Kępień 648ef3a2b4 Fix handling undefined GSS_SPNEGO_MECHANISM macro ... BIND 9 attempts to look up GSSAPI OIDs for the Kerberos 5 and SPNEGO mechanisms in the relevant header files provided by the Kerberos/GSSAPI library used. Due to the differences between various Kerberos/GSSAPI implementations, if any of the expected preprocessor macros (GSS_KRB5_MECHANISM, GSS_SPNEGO_MECHANISM) is not defined in the header files provided by the library used, the code in lib/dns/gssapictx.c defines its own version of each missing macro, so that BIND 9 can attempt to use the relevant security mechanisms anyway. Commit a875dcc669, which contains a partial backport of the changes introduced in commit 978c7b2e89, left a block of code in the lib/dns/dst_internal.h header which defines the GSS_SPNEGO_MECHANISM preprocessor macro to NULL if it is not defined by any header file provided by the Kerberos/GSSAPI library used. This causes the gss_add_oid_set_member() call in the mech_oid_set_create() helper function to always return an error. This in turn causes the dst_gssapi_acquirecred() function to also always return an error, which ultimately prevents any named instance whose configuration includes the "tkey-gssapi-credential" option from starting. Remove the offending conditional definition of the GSS_SPNEGO_MECHANISM preprocessor macro from lib/dns/dst_internal.h, so that a proper GSSAPI OID is assigned to that macro in lib/dns/gssapictx.c when the Kerberos/GSSAPI library used does not define it.		2021-04-16 14:40:06 +02:00
..
bind9	Stop including dnstap headers from <dns/dnstap.h>	2021-02-16 12:08:21 +11:00
dns	Fix handling undefined GSS_SPNEGO_MECHANISM macro	2021-04-16 14:40:06 +02:00
irs	Use BIND 9.17 preprocessor macro to skip unit test	2021-02-17 12:09:25 +01:00
isc	Merge branch 'bind-dyndb-ldap-v9.16.13' into 'main'	2021-03-26 18:48:06 +00:00
isccc	Use BIND 9.17 preprocessor macro to skip unit test	2021-02-17 12:09:25 +01:00
isccfg	Add purge-keys config option	2021-02-23 09:18:55 +01:00
ns	If RPZ config'd, bail stale-answer-client-timeout	2021-04-02 13:29:27 +02:00
samples	Add libssl libraries to Windows build	2020-12-09 10:46:16 +01:00
win32/bindevt	update all copyright headers to eliminate the typo	2020-09-14 16:50:58 -07:00
.gitignore
Kyuafile	link in lib/isccc/tests/Kyuafile	2018-11-13 07:23:36 +11:00
Makefile.in	remove lib/tests as nothing uses it anymore	2018-03-09 14:12:50 -08:00