Fix SPNEGO one-hop interop against old IIS IIS 6.0 and similar return a zero length reponse buffer in the last SPNEGO packet when context initiation is performed without mutual authentication. In this case the underlying Kerberos mechanism has already completed successfully on the first invocation, and SPNEGO does not expect a mech response token in the answer. If we get an empty mech response token when the mech is complete during negotiation, ignore it. [ghudson@mit.edu: small code style and commit message changes] (cherry picked from commit 37af638b742dbd642eb70092e4f7781c3f69d86d) https://github.com/krb5/krb5/commit/e36d043094fe214c5519244ea93112ca5331e007 Author: Greg Hudson Committer: Tom Yu Commit: e36d043094fe214c5519244ea93112ca5331e007 Branch: krb5-1.10 src/lib/gssapi/spnego/spnego_mech.c | 6 ++++++ 1 files changed, 6 insertions(+), 0 deletions(-)