[krbdev.mit.edu #8775] git commit

[Greg Hudson via RT]

Process SPNEGO error tokens through mech

In the SPNEGO initiator code, if the acceptor returns a token with
negState=REJCET and a mechanism token, process the token through the
mech to get a better error status.

[ghudson at mit.edu: modified approach for clarity and to prevent some
edge cases; rewrote commit message]

https://github.com/krb5/krb5/commit/51d3f2ab706197bf8fea82e0a7e9c877d6563986
Author: Luke Howard <lukeh at padl.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 51d3f2ab706197bf8fea82e0a7e9c877d6563986
Branch: master
 src/lib/gssapi/spnego/spnego_mech.c |   48 +++++++++++++++++++++++-----------
 src/tests/gssapi/t_err.c            |   11 ++++++--
 src/tests/gssapi/t_gssapi.py        |    1 +
 3 files changed, 41 insertions(+), 19 deletions(-)