Not getting delegation credential from gss_accept_sec_context()

[Xie, Hugh]

Perhaps this is a bug. Gss_init_sec_context did return GSS_S_COMPLETE for me.

-----Original Message-----
From: Greg Hudson [ghudson at mit.edu<mailto:ghudson at mit.edu>]
Sent: Wednesday, October 08, 2014 11:10 PM Eastern Standard Time
To: Xie, Hugh; Kerberos at mit.edu
Subject: Re: Not getting delegation credential from gss_accept_sec_context()


On 10/08/2014 05:45 PM, Xie, Hugh wrote:
> My mistake. The error is from * gss_inquire_context(&min_stat, state->context, &gssuser, NULL, NULL, NULL,  NULL, NULL, NULL);* post call to * gss_init_sec_context*. Can I still call this function post gss_init_sec_context with delegate handle?

Our implementation requires the context argument of gss_inquire_context
to be an established context, although this isn't required by RFC 2743
or RFC 2744.  I will file an issue.  For the moment, don't inquire the
context until gss_init_sec_context returns GSS_S_COMPLETE.

----------------------------------------------------------------------
This message, and any attachments, is for the intended recipient(s) only, may contain information that is privileged, confidential and/or proprietary and subject to important terms and conditions available at http://www.bankofamerica.com/emaildisclaimer.   If you are not the intended recipient, please delete this message.