On Thu, 28 Feb 2013, Benjamin Kaduk wrote:
On Thu, 28 Feb 2013, Jeffrey Hutzelman wrote:
On Thu, 2013-02-28 at 17:05 -0500, Benjamin Kaduk wrote:
It's hard to get the logic right for when to terminate a GSS negotiation
loop
Yes; getting this right can be quite tricky. Someone should probably go
back and review the document to make sure we're correctly describing
what implementations should do and covering all the bases.
We're not; we knew this a while ago, but I haven't gotten around to writing
the new text yet.
It's also worth noting that the standard GSS-API negotiation loop does not
provide the major/minor status from gss_accept_sec_context() to the
initiator as we do. So maybe our case is more confusing than the standard
case, after all.
-Ben
_______________________________________________
AFS3-standardization mailing list
[email protected]
http://lists.openafs.org/mailman/listinfo/afs3-standardization