Do multiple token exchanges ever happen?

Simon Wilkinson simon at
Thu Dec 17 15:11:25 EST 2009

On 17 Dec 2009, at 20:02, Matthew M. DeLoera wrote:

> Are there situations where gss_accept_sec_context and/or
> gss_init_sec_context would actually return GSS_S_CONTUNUE_NEEDED?

It definitely happens with non-Kerberos GSSAPI mechanisms. One of the  
great things about testing the OpenSSH GSSAPI implementation with GSI  
was that it showed up issues with CONTINUE_NEEDED.


More information about the krbdev mailing list