Date: Sat, 1 Mar 2003 15:26:47 -0600
From: Nicolas Williams <Nicolas.Williams@sun.com>
To: krb5-bugs@mit.edu
Subject: Remove caching of default initiator GSS credential data
Message-Id: <20030301152647.F6698@binky.central.sun.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
Content-Length: 646

There is no need for gss_inquire_cred(GSS_C_NO_CREDENTIAL) to have any
sort of predictable outputs; its outputs should always reflect the
current state of the user's ccache, and not that of the user's ccache at
the time that GSS_C_NO_CREDENTIAL is first referred to.

Applications that need to know details of the default credential used to
initiate some context, such as initiator name or credential lifetime,
can get the information by inquiring the context and should not assume
that the outputs of gss_inquire_cred(GSS_C_NO_CREDENTIAL) will reflect
the same values as used during the initiation of any one context.

Please remove this cache.