gss_init_sec_context error for spnego

[Simon Josefsson]

"Stephen Ince" <since at opendemand.com> writes:

> I am getting a 589824 major status for gss_init_sec_context. Does any know 
> why? It is for the second call to gss_init_sec_context.
>
> Basically I am doing the following.
>
>     major_status = gss_init_sec_context(&minor_status,
>         GSS_C_NO_CREDENTIAL,
>         &neg_ctx->context,
>         neg_ctx->server_name,
>         &gss_spnego_mech_oid_desc,
>         GSS_C_MUTUAL_FLAG|GSS_C_DELEG_FLAG|GSS_C_REPLAY_FLAG ,
>         GSS_C_INDEFINITE,
>         GSS_C_NO_CHANNEL_BINDINGS,
>         &input_token,
>         NULL,
>         &output_token,
>         NULL,
>         NULL);
>
> On the first call to gss_init_sec_context the variable neg_ctx->context is 
> intialized to GSS_C_NO_CONTEXT
> I fail on the second call to gss_init_sec_context

Did you check error code on the first gss_init_sec_context?  Maybe it
didn't work.

/Simon

jas at mocca:~$ gss -m 589824
GSS-API major status code 589824 (0x90000).

   MSB                                                                 LSB
   +-----------------+-----------------+---------------------------------+
   |  Calling Error  |  Routine Error  |       Supplementary Info        |
   | 0 0 0 0 0 0 0 0 | 0 0 0 0 1 0 0 1 | 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 |
   +-----------------+-----------------+---------------------------------+
Bit 31            24  23            16  15                             0

Masked routine error 589824 (0x90000) shifted into 9 (0x9):
A token was invalid

jas at mocca:~$