Re: [PATCH 0/3] MR8020: libs/ldap: Make GSS-SPNEGO SASL plugin work with LDAP server that uses Kerberos authentication.

[Dmitry Timoshkov (＠dmitry)]

On Tue May 13 18:30:30 2025 +0000, Hans Leidekker wrote:
> If I can find more time I'll take a closer look. As for those RET flags
> I'm not sure we should be acting on them:
> `The caller is responsible for determining whether the final context
> attributes are sufficient. If, for example, confidentiality was
> requested, but could not be established, some applications may choose to
> shut down the connection immediately.`

Yes, that's precisely the reason of the check. And the caller in this context is the SASL plugin.