From: Kevin Coffman Switch the hard-coded GSS_C_ANON_FLAG with a hard-coded GSS_C_MUTUAL_FLAG. NOTE: we need a way to pass the switch. Signed-off-by: Andy Adamson --- nfs-utils-1.0.7-kwc/utils/gssd/gssd_proc.c | 8 ++++++-- 1 files changed, 6 insertions(+), 2 deletions(-) diff -puN utils/gssd/gssd_proc.c~gssd_continue_init utils/gssd/gssd_proc.c --- nfs-utils-1.0.7/utils/gssd/gssd_proc.c~gssd_continue_init 2005-10-26 17:28:41.736587000 -0400 +++ nfs-utils-1.0.7-kwc/utils/gssd/gssd_proc.c 2005-10-26 17:28:41.801587000 -0400 @@ -442,7 +442,10 @@ int create_auth_rpc_client(struct clnt_i } else if (authtype == AUTHTYPE_SPKM3) { sec.mech = (gss_OID)&spkm3oid; - sec.req_flags = GSS_C_ANON_FLAG; + /* XXX sec.req_flags = GSS_C_ANON_FLAG; + * Need a way to switch.... + */ + sec.req_flags = GSS_C_MUTUAL_FLAG; } else { printerr(0, "ERROR: Invalid authentication type (%d) " @@ -492,8 +495,9 @@ int create_auth_rpc_client(struct clnt_i auth = authgss_create_default(rpc_clnt, clp->servicename, &sec); if (!auth) { /* Our caller should print appropriate message */ - printerr(2, "WARNING: Failed to create krb5 context for " + printerr(2, "WARNING: Failed to create %s context for " "user with uid %d for server %s\n", + (authtype == AUTHTYPE_KRB5 ? "krb5":"spkm3"), uid, clp->servername); goto out_fail; } _