Do multiple token exchanges ever happen?

[Matthew M. DeLoera]

Ahhh.... Thanks for the reply.

I do recall seeing it when playing around with NTLM and SSPI once upon a 
time. How about with Kerberos-only?

- Matthew


Simon Wilkinson wrote:
>
> On 17 Dec 2009, at 20:02, Matthew M. DeLoera wrote:
>
>> Are there situations where gss_accept_sec_context and/or
>> gss_init_sec_context would actually return GSS_S_CONTUNUE_NEEDED?
>
> It definitely happens with non-Kerberos GSSAPI mechanisms. One of the 
> great things about testing the OpenSSH GSSAPI implementation with GSI 
> was that it showed up issues with CONTINUE_NEEDED.
>
> S.
>
>
>