On Tue, 26 Aug 2003, Steven Michaud wrote: > Slightly off topic: Would it be reasonable to make gss userauth fail > if mutual authentication isn't available? Fail on the client, that is -- if the client called gss_init_sec_context() and ret_flags indicated mutual authentication wasn't supported.