Do multiple token exchanges ever happen?

[Simon Wilkinson]

On 17 Dec 2009, at 20:02, Matthew M. DeLoera wrote:

> Are there situations where gss_accept_sec_context and/or
> gss_init_sec_context would actually return GSS_S_CONTUNUE_NEEDED?

It definitely happens with non-Kerberos GSSAPI mechanisms. One of the  
great things about testing the OpenSSH GSSAPI implementation with GSI  
was that it showed up issues with CONTINUE_NEEDED.

S.