Reuse of GSSAPI Tokens

Nicolas Williams Nicolas.Williams at sun.com
Thu Jul 21 11:57:19 EDT 2005


On Thu, Jul 21, 2005 at 09:37:33AM -0400, Jiva DeVoe wrote:
> Is it possible to use a token generated by the GSSAPI call  
> gss_init_sec_context call to establish more than one security context  
> via the gss_accept_sec_context call?
> 
> Meaning, can I pass a token to gss_accept more than once?  In my  
> testing, it appears I can't.  Subsequent calls result in an invalid  
> context.  If this is the case, I'm curious how this is done, since my  
> token appears to be unchanged.

Replay caching.


More information about the krbdev mailing list