Do multiple token exchanges ever happen?
simon at sxw.org.uk
Thu Dec 17 15:11:25 EST 2009
On 17 Dec 2009, at 20:02, Matthew M. DeLoera wrote:
> Are there situations where gss_accept_sec_context and/or
> gss_init_sec_context would actually return GSS_S_CONTUNUE_NEEDED?
It definitely happens with non-Kerberos GSSAPI mechanisms. One of the
great things about testing the OpenSSH GSSAPI implementation with GSI
was that it showed up issues with CONTINUE_NEEDED.
More information about the krbdev