RFC4752 Section 3.1 states "The authorization identity is not terminated with a zero-valued (%x00) octet". Although a comment in code said it may be needed anyway, nothing confirms it. In addition, servers may consider it as part of the identity, causing a failure. Closes #7008 |
||
|---|---|---|
| .. | ||
| cleartext.c | ||
| cram.c | ||
| digest_sspi.c | ||
| digest.c | ||
| digest.h | ||
| gsasl.c | ||
| krb5_gssapi.c | ||
| krb5_sspi.c | ||
| ntlm_sspi.c | ||
| ntlm.c | ||
| ntlm.h | ||
| oauth2.c | ||
| spnego_gssapi.c | ||
| spnego_sspi.c | ||
| vauth.c | ||
| vauth.h | ||