Re: Difference in handling SPNEGO tokens between heimdal 0.7.2 , 0.8.1 and 1.0.1

["Markus Moeller" <huaraz@moeller.plus.com>]

A small update on this:

The environment is based on a cross-realm between a w2k3 kdc and a MIT kdc. 
Clients are in w2k3 and the HTTP service principal on MIT.  (sorry for 
missing out on this details)

The issue I experience seems to be related to the crosss realm setup and how 
MIT treats the pac data.

Markus

"Markus Moeller" <huaraz@moeller.plus.com> wrote in message 
news:fh08tb$qk5$1@ger.gmane.org...
>I used mod_spnego for some time successfully with heimdall 0.7.2. After 
>upgrading to heimdal 1.0.1 I get the following error:
>
> [Thu Nov 08 23:31:04 2007] [error] [client 192.168.1.10] mod_spnego: 
> gss_accept_sec_context failed; GSS-API: continuation call to routine 
> required)
> [Thu Nov 08 23:31:04 2007] [error] [client 192.168.1.10] mod_spnego: 
> gss_accept_sec_context failed; GSS-API mechanism: unknown mech-code 0 for 
> mech unknown)
>
>
> Why does gss_accept_sec_context  now require a continuation ?
>
> Markus
>
>
>
>