gss_init_sec_context error for spnego

[Stephen Ince]

I have made some progress. I am now getting a "Message stream modified" 
from gss_init_sec_context on the second call.

I am doing the following.

    gss_krb5_ccache_name
    gss_init_sec_context

    get and decode input negotiate from IE
    gss_init_sec_context


I think my error maybe how I am base64 decoding the negotiate token. or in 
how I am setting the default creditial cache.
Any help would be greatly appreciated.

Steve

----- Original Message ----- 
From: "Stephen Ince" <since at opendemand.com>
To: <krbdev at mit.edu>
Sent: Sunday, October 19, 2008 4:23 PM
Subject: gss_init_sec_context error for spnego


>I am getting a 589824 major status for gss_init_sec_context. Does any know
> why? It is for the second call to gss_init_sec_context.
>
> Basically I am doing the following.
>
>    major_status = gss_init_sec_context(&minor_status,
>        GSS_C_NO_CREDENTIAL,
>        &neg_ctx->context,
>        neg_ctx->server_name,
>        &gss_spnego_mech_oid_desc,
>        GSS_C_MUTUAL_FLAG|GSS_C_DELEG_FLAG|GSS_C_REPLAY_FLAG ,
>        GSS_C_INDEFINITE,
>        GSS_C_NO_CHANNEL_BINDINGS,
>        &input_token,
>        NULL,
>        &output_token,
>        NULL,
>        NULL);
>
> On the first call to gss_init_sec_context the variable neg_ctx->context is
> intialized to GSS_C_NO_CONTEXT
> I fail on the second call to gss_init_sec_context
>
>
> Steve
> since at opendemand.com
>
> _______________________________________________
> krbdev mailing list             krbdev at mit.edu
> https://mailman.mit.edu/mailman/listinfo/krbdev
>