[krbdev.mit.edu #1352] Cannot return prot_ready without unwrap working

Sam Hartman via RT rt-comment at krbdev.mit.edu
Fri Feb 21 15:24:02 EST 2003


>>>>> "Nicolas" == Nicolas Williams via RT <rt-comment at krbdev.mit.edu> writes:


    Nicolas> But even so, I think it makes plenty of sense to allow
    Nicolas> the client to send the MIC as soon as the mech it picks
    Nicolas> to negotiate for optimistically is ready to do so.

I'd agree with you except that this is fairly clearly prohibited by
section 3.2.2 of the RFC.  I suspect SPNEGO predates prot-ready.




More information about the krb5-bugs mailing list