Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.427 (Entity 5.427)
RT-Send-CC:
X-RT-Original-Encoding: iso-8859-1
Content-Length: 603

The bug where gss_acquire_cred() returns the status code of the final 
mech was fixed in release 1.11 (ticket #6973).  The fix might be easily 
backportable to 1.10:
    
https://github.com/krb5/krb5/commit/71ca96850348569a7358b32301bb0cc60eb
08103

There are two bugs affecting SPNEGO's ability to display 
gss_acquire_cred() errors, which were fixed in releases 1.11 (no 
ticket) and 1.12.1 (ticket #7045).  These fixes are not as easily 
backported, but you might not need them.

Release 1.10 is no longer supported, as we only support releases for 
two years.  We also cannot promise urgent support.