Currently, the GSS-API routines for handling authdata only extract the authorization data from the ticket, not that from the authenticator. This is incorrect. Introduce a new function krb5_merge_authadata to merge two authdata arrays into a newly allocated result array. Use this function in accept_sec_context.c to include both sets of authdata. https://github.com/krb5/krb5/commit/f860222766842720a2fbf8d4953c6dcacbe50afc Commit By: hartmans Revision: 22056 Changed Files: U trunk/src/include/krb5/krb5.hin U trunk/src/lib/gssapi/krb5/accept_sec_context.c U trunk/src/lib/krb5/krb/copy_auth.c U trunk/src/lib/krb5/libkrb5.exports