From 238693486403639dc47964ab1cb1d3167148238a Mon Sep 17 00:00:00 2001
From: kouril <kouril>
Date: Fri, 1 Apr 2011 10:45:06 +0000
Subject: [PATCH] Return even last token on GSS errors

---
 gss.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/gss.c b/gss.c
index 6b04e53..836df6f 100644
--- a/gss.c
+++ b/gss.c
@@ -267,9 +267,14 @@ gss_authenticate(request_rec *r, gss_auth_config *conf, gss_conn_ctx ctx,
      gss_log(APLOG_MARK, APLOG_ERR, 0, r,
 	     "%s", get_gss_error(r, major_status, minor_status,
 		                 "Failed to establish authentication"));
+#if 0
      /* Don't offer the Negotiate method again if call to GSS layer failed */
      /* XXX ... which means we don't return the "error" output */
      *negotiate_ret_value = NULL;
+#endif
+     gss_delete_sec_context(&minor_status, &ctx->context, GSS_C_NO_BUFFER);
+     ctx->context = GSS_C_NO_CONTEXT;
+     ctx->state = GSS_CTX_EMPTY;
      ret = HTTP_UNAUTHORIZED;
      goto end;
   }
-- 
2.1.4