In gsskrb5_accept_delegated_token() it is wrong to store the delegated credentials in the default ccache by default. When the caller does not provide a target credential handle, we just do nothing and return success. Test the return value of gsskrb5_accept_delegated_token() against GSS_S_COMPLETE, rather than 0.
22 KiB
22 KiB