Do multiple token exchanges ever happen?
Matthew M. DeLoera
mdeloera at exacq.com
Thu Dec 17 15:27:44 EST 2009
Ahhh.... Thanks for the reply.
I do recall seeing it when playing around with NTLM and SSPI once upon a
time. How about with Kerberos-only?
Simon Wilkinson wrote:
> On 17 Dec 2009, at 20:02, Matthew M. DeLoera wrote:
>> Are there situations where gss_accept_sec_context and/or
>> gss_init_sec_context would actually return GSS_S_CONTUNUE_NEEDED?
> It definitely happens with non-Kerberos GSSAPI mechanisms. One of the
> great things about testing the OpenSSH GSSAPI implementation with GSI
> was that it showed up issues with CONTINUE_NEEDED.
More information about the krbdev