mark place to fix (don't offer Negotiate when some GSS call failed)

diff --git a/src/mod_auth_kerb.c b/src/mod_auth_kerb.c
index f9f3ca0..9dd6169 100644 (file)
--- a/src/mod_auth_kerb.c
+++ b/src/mod_auth_kerb.c
@@ -1048,6 +1048,8 @@ authenticate_user_gss(request_rec *r,
                "%s", get_gss_error(r->pool, major_status, minor_status,
                                    "gss_accept_sec_context() failed"));
      ret = HTTP_UNAUTHORIZED;
+     /* XXX in this case the server hasn't to return to the client the
+      * Negotiate method again! */
      goto end;
   }