gskeykex - Delete_sec_context() on re-key

[David Leonard <David.Leonard%quest.com@localhost>]

I was reading through the secsh-gsskeyex draft again and it struck
me that when re-keying there is no message provision for passing back the 
possible token generated by a call to GSS_Delete_sec_context().

The result is that the protocol will leak unreachable context 
over a long session.

Has anyone hit this? I'm seeing something here where I think I'm 
exhausting the number of simultaneous contexts the GSS implementation
can handle.

d
--
David Leonard
Vintela Resource Central software engineer
Quest Software; Brisbane, Australia; www.quest.com
Phone: (US) +1 801 655 2755 
       (AU) +61 7 3023 5133