Re: [michaels@inet.no: Re: gss_accept_sec_context() problem]

[joda@pdc.kth.se (Johan Danielsson)]

Michael Shuldman <michaels@inet.no> writes:

> I can't see any requirement for input_token to be filled when
> calling gss_accept_sec_context() and was expecting
> GSS_S_CONTINUE_NEEDED.

No, but I also can't see anything that says you can pass something
that didn't come from the remote client. From RFC2744:

   input_token_buffer   buffer, opaque, read token obtained from remote
                        application.

Why do you want to pass an empty token, and what do you think it
should mean?

/Johan