From: kouril <kouril>
Date: Fri, 1 Apr 2011 10:45:06 +0000 (+0000)
Subject: Return even last token on GSS errors
X-Git-Tag: gssweb-apache-2014-09-08~27
X-Git-Url: http://www.project-moonshot.org/gitweb/?p=mod_auth_kerb.cvs%2F.git;a=commitdiff_plain;h=238693486403639dc47964ab1cb1d3167148238a

Return even last token on GSS errors
---

diff --git a/gss.c b/gss.c
index 6b04e53..836df6f 100644
--- a/gss.c
+++ b/gss.c
@@ -267,9 +267,14 @@ gss_authenticate(request_rec *r, gss_auth_config *conf, gss_conn_ctx ctx,
      gss_log(APLOG_MARK, APLOG_ERR, 0, r,
 	     "%s", get_gss_error(r, major_status, minor_status,
 		                 "Failed to establish authentication"));
+#if 0
      /* Don't offer the Negotiate method again if call to GSS layer failed */
      /* XXX ... which means we don't return the "error" output */
      *negotiate_ret_value = NULL;
+#endif
+     gss_delete_sec_context(&minor_status, &ctx->context, GSS_C_NO_BUFFER);
+     ctx->context = GSS_C_NO_CONTEXT;
+     ctx->state = GSS_CTX_EMPTY;
      ret = HTTP_UNAUTHORIZED;
      goto end;
   }