1c1
< /* $OpenBSD: gss-serv.c,v 1.5 2003/11/17 11:06:07 markus Exp $ */
---
> /* $OpenBSD: gss-serv.c,v 1.8 2005/08/30 22:08:05 djm Exp $ */
137c137
< char *tok;
---
> u_char *tok;
167c167
< !ssh_gssapi_check_oid(ctx,tok+6,oidl))
---
> !ssh_gssapi_check_oid(ctx,tok+6,oidl))
270c270
< gssapi_client.store.envval);
---
> gssapi_client.store.envval);
277a278,279
> OM_uint32 lmin;
>
284c286,295
< return ((*gssapi_client.mech->userok)(&gssapi_client, user));
---
> if ((*gssapi_client.mech->userok)(&gssapi_client, user))
> return 1;
> else {
> /* Destroy delegated credentials if userok fails */
> gss_release_buffer(&lmin, &gssapi_client.displayname);
> gss_release_buffer(&lmin, &gssapi_client.exportedname);
> gss_release_cred(&lmin, &gssapi_client.creds);
> memset(&gssapi_client, 0, sizeof(ssh_gssapi_client));
> return 0;
> }