gss_accept_sec_context() failed: An unsupported mechanism was requested

Question

I have a client on windows which is sending a kerberos token obtained from windows using sspi. When I pass in client's token to gss_accept_sec_context on server (Linux Redhat 8) , I get "An unsupported mechanism was requested"

I am calling the gss_accept_sec_context as below:

j_stat = gss_accept_sec_context(&min_stat, context,
                                            *server_creds, &recv_tok,
                                            GSS_C_NO_CHANNEL_BINDINGS,
                                            &client, &doid, &send_tok,
                                            NULL,
                                            NULL,  /* time_rec */
                                            NULL); /* del_cred_handle */ 

I acquire the credentials as :

OM_uint32 maj_stat, min_stat;

  maj_stat = gss_acquire_cred(&min_stat, GSS_C_NO_NAME,
                             GSS_C_INDEFINITE , 
                             GSS_C_NO_OID_SET, 
                             GSS_C_ACCEPT,
                             server_creds,
                             NULL, NULL);

What could be the problem?

Answer 1

I hightly doubt that. It is likely an NTLM or SPNEGO token.