On 1 Mar 2013, at 02:13, Benjamin Kaduk wrote:

> It's also worth noting that the standard GSS-API negotiation loop does not 
> provide the major/minor status from gss_accept_sec_context() to the initiator 
> as we do.  So maybe our case is more confusing than the standard case, after 
> all.

Is that not just the equivalent of the OpenSSH error packet though? Letting the 
initiator know why the acceptor failed is really handy for debugging problems.

S.

_______________________________________________
AFS3-standardization mailing list
[email protected]
http://lists.openafs.org/mailman/listinfo/afs3-standardization

Reply via email to