return GSS_S_CREDENTIALS_EXPIRED if credentials expired

[mech_eap.orig] / TODO

diff --git a/TODO b/TODO
index 41465a9..d622364 100644 (file)
--- a/TODO
+++ b/TODO
@@ -1,3 +1,7 @@
-- hook up libradius, AVP parsing logic
-- better handling of mechanism-specific error namespace
-- better interfaces for initiator EAP configuration/credential management
+- integration with initiator-side EAP channel bindings
+- integration with final supplicant architecture
+- test Heimdal port
+
+- fix ABNF: no slash in the case where there is no host
+- specify anonymous behaviour: use empty name
+