bugfix for revision 1.5: if GSS_S_COMPLETE is returned, we should send

SSH2_MSG_KEXGSS_COMPLETE as before, not SSH2_MSG_KEXGSS_CONTINUE.
the other change in revision 1.5 is still good and is a complete fix
for the previous problem.

diff --git a/openssh/kexgsss.c b/openssh/kexgsss.c
index a92ed5df1f99658a365b1936f3d4205a88447675..c4e0e9d225efbb333b92e0505281eb3ae5219bb3 100644 (file)
--- a/openssh/kexgsss.c
+++ b/openssh/kexgsss.c
@@ -115,8 +115,7 @@ kexgss_server(Kex *kex)
                if (dh_client_pub == NULL)
                        fatal("No client public key");
                
-               if (maj_status & GSS_S_CONTINUE_NEEDED ||
-                   (maj_status == GSS_S_COMPLETE && send_tok.length > 0)) {
+               if (maj_status & GSS_S_CONTINUE_NEEDED) {
                        debug("Sending GSSAPI_CONTINUE");
                        packet_start(SSH2_MSG_KEXGSS_CONTINUE);
                        packet_put_string(send_tok.value,send_tok.length);