Received: from pch.mit.edu (PCH.MIT.EDU [18.7.21.90]) by krbdev.mit.edu (8.12.9) with ESMTP id l3H37lL8027947; Mon, 16 Apr 2007 23:07:47 -0400 (EDT) Received: from pch.mit.edu (pch.mit.edu [127.0.0.1]) by pch.mit.edu (8.13.6/8.12.8) with ESMTP id l3H37gUJ026929; Mon, 16 Apr 2007 23:07:42 -0400 Received: from biscayne-one-station.mit.edu (BISCAYNE-ONE-STATION.MIT.EDU [18.7.7.80]) by pch.mit.edu (8.13.6/8.12.8) with ESMTP id l3H379ZM026804 for ; Mon, 16 Apr 2007 23:07:09 -0400 Received: from outgoing.mit.edu (OUTGOING-AUTH.MIT.EDU [18.7.22.103]) by biscayne-one-station.mit.edu (8.13.6/8.9.2) with ESMTP id l3H378L0004831 for ; Mon, 16 Apr 2007 23:07:08 -0400 (EDT) Received: from cathode-dark-space.mit.edu (CATHODE-DARK-SPACE.MIT.EDU [18.18.1.96]) (authenticated bits=56) (User authenticated as tlyu@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.6/8.12.4) with ESMTP id l3H377Gv028922 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Mon, 16 Apr 2007 23:07:08 -0400 (EDT) Received: (from tlyu@localhost) by cathode-dark-space.mit.edu (8.12.9.20060308) id l3H377xO002214; Mon, 16 Apr 2007 23:07:07 -0400 (EDT) To: krb5-bugs@MIT.EDU Subject: SPNEGO acc_ctx_call_acc should only call gssint_get_mech_type for 1st token From: Tom Yu Date: Mon, 16 Apr 2007 23:07:07 -0400 Message-ID: Lines: 4 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Scanned-BY: MIMEDefang 2.42 X-Spam-Flag: NO X-Spam-Score: 0.00 X-Mailman-Approved-At: Mon, 16 Apr 2007 23:07:41 -0400 X-Beenthere: krb5-bugs-incoming@mailman.mit.edu X-Mailman-Version: 2.1.6 Precedence: list Sender: krb5-bugs-incoming-bounces@PCH.MIT.EDU Errors-To: krb5-bugs-incoming-bounces@PCH.MIT.EDU X-RT-Original-Encoding: us-ascii Content-Length: 223 Luke Howard notes that SPNEGO's acc_ctx_call_acc() should only call gssint_get_mech_type() for the first token, because not all mechanisms wrap subsequent context-establishment tokens in the generic DER-like token framing.