[36526] in Kerberos
Re: Not getting delegation credential from gss_accept_sec_context()
daemon@ATHENA.MIT.EDU (Greg Hudson)
Wed Oct 8 23:10:44 2014
Message-ID: <5435FCA4.9030709@mit.edu>
Date: Wed, 08 Oct 2014 23:10:28 -0400
From: Greg Hudson <ghudson@mit.edu>
MIME-Version: 1.0
To: "Xie, Hugh" <hugh.xie@bankofamerica.com>,
"Kerberos@mit.edu" <Kerberos@mit.edu>
In-Reply-To: <7E270C3427928E499F189C5636C52CDC45B9F5B8@smtp_mail.bankofamerica.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On 10/08/2014 05:45 PM, Xie, Hugh wrote:
> My mistake. The error is from * gss_inquire_context(&min_stat, state->context, &gssuser, NULL, NULL, NULL, NULL, NULL, NULL);* post call to * gss_init_sec_context*. Can I still call this function post gss_init_sec_context with delegate handle?
Our implementation requires the context argument of gss_inquire_context
to be an established context, although this isn't required by RFC 2743
or RFC 2744. I will file an issue. For the moment, don't inquire the
context until gss_init_sec_context returns GSS_S_COMPLETE.
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
