From c045675ee9907c0c604f453991f03e4cde50ed02 Mon Sep 17 00:00:00 2001 From: jbasney Date: Tue, 7 Jun 2005 21:42:15 +0000 Subject: [PATCH] bugfix for revision 1.5: if GSS_S_COMPLETE is returned, we should send SSH2_MSG_KEXGSS_COMPLETE as before, not SSH2_MSG_KEXGSS_CONTINUE. the other change in revision 1.5 is still good and is a complete fix for the previous problem. --- openssh/kexgsss.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/openssh/kexgsss.c b/openssh/kexgsss.c index a92ed5d..c4e0e9d 100644 --- a/openssh/kexgsss.c +++ b/openssh/kexgsss.c @@ -115,8 +115,7 @@ kexgss_server(Kex *kex) if (dh_client_pub == NULL) fatal("No client public key"); - if (maj_status & GSS_S_CONTINUE_NEEDED || - (maj_status == GSS_S_COMPLETE && send_tok.length > 0)) { + if (maj_status & GSS_S_CONTINUE_NEEDED) { debug("Sending GSSAPI_CONTINUE"); packet_start(SSH2_MSG_KEXGSS_CONTINUE); packet_put_string(send_tok.value,send_tok.length); -- 2.45.2