Delegated creds and SPNEGO

[Nicolas Williams]

On Wed, Aug 26, 2009 at 07:49:00PM +0200, Luke Howard wrote:
> Sun fixed it without explicitly checking for SPNEGO, instead making  
> the assumption that pseudo-mechs do not wrap credential handles. The  
> comment in the source is:

Hmm, not quite.  This doesn't apply to all pseudo-mechs -- it applies
only to pseudo-mechs that set actual_mech to something other than their
own OID.  SPNEGO does that.  Stackable pseudo-mechs need not.