Use AD-KDCIssued to protect RADIUS authdata. Cleanup.

[mech_eap.orig] / wrap_iov_length.c

diff --git a/wrap_iov_length.c b/wrap_iov_length.c
index c451cb2..33a15ef 100644 (file)
--- a/wrap_iov_length.c
+++ b/wrap_iov_length.c
@@ -80,8 +80,8 @@ gssEapWrapIovLength(OM_uint32 *minor,
     if (qop_req != GSS_C_QOP_DEFAULT)
         return GSS_S_FAILURE;
 
-    if (!CTX_IS_ESTABLISHED(ctx))
-        return GSS_S_NO_CONTEXT;
+    if (ctx->encryptionType == ENCTYPE_NULL)
+        return GSS_S_UNAVAILABLE;
 
     GSSEAP_KRB_INIT(&krbContext);