remove reflect error

diff --git a/accept_sec_context.c b/accept_sec_context.c
index 2b2d995..4d55f9f 100644 (file)
--- a/accept_sec_context.c
+++ b/accept_sec_context.c
@@ -517,7 +517,6 @@ makeErrorToken(OM_uint32 *minor,
     case GSSEAP_TOK_TRUNC:
     case GSSEAP_BAD_DIRECTION:
     case GSSEAP_WRONG_TOK_ID:
-    case GSSEAP_REFLECT:
     case GSSEAP_CRIT_EXT_UNAVAILABLE:
     case GSSEAP_MISSING_REQUIRED_EXT:
     case GSSEAP_KEY_UNAVAILABLE:

diff --git a/gsseap_err.et b/gsseap_err.et
index c92def6..0f4420a 100644 (file)
--- a/gsseap_err.et
+++ b/gsseap_err.et
@@ -43,7 +43,6 @@ error_code GSSEAP_BAD_TOK_HEADER,           "Token header is malformed or corrup
 error_code GSSEAP_TOK_TRUNC,                "Token is missing data"
 error_code GSSEAP_BAD_DIRECTION,            "Packet was replayed in wrong direction"
 error_code GSSEAP_WRONG_TOK_ID,             "Received token ID does not match expected token ID"
-error_code GSSEAP_REFLECT,                  "Token was reflected"
 error_code GSSEAP_CRIT_EXT_UNAVAILABLE,     "Critical extension unavailable"
 error_code GSSEAP_MISSING_REQUIRED_EXT,     "Missing required extension"
 error_code GSSEAP_KEY_UNAVAILABLE,          "EAP key unavailable"

diff --git a/util.h b/util.h
index 910b5df..de8dcb8 100644 (file)
--- a/util.h
+++ b/util.h
@@ -241,8 +241,8 @@ gssEapDeriveRfc3961Key(OM_uint32 *minor,
                        krb5_keyblock *pKey);
 
 /* util_exts.c */
-#define EXT_FLAG_CRITICAL               0x80000000
-#define EXT_FLAG_VERIFIED               0x40000000
+#define EXT_FLAG_CRITICAL               0x80000000  /* critical, wire flag */
+#define EXT_FLAG_VERIFIED               0x40000000  /* verified, API flag */
 
 #define EXT_TYPE_GSS_CHANNEL_BINDINGS   0x00000000
 #define EXT_TYPE_REAUTH_CREDS           0x00000001