Revised gssapi patch

[Marc W. Mengel]

I've posted an almost identical version of this on the "issue tracker"
on ccvs.cvshome.org, but
a) apparently no-one looks at that, and
b) this is a slightly better fix.

In cvs 1.11.1p1 a CVSROOT of :gserver:user@host:port/path doesn't work --
the "user" part is ignored. The attached patch fixes this by making a
slightly different auth request with a username.

This version of the patch also lets non-user kerberos principals in if
they are listed in the target account's .k5login file (i.e. host
principals, etc.)  That is to say, if krb5_aname_to_localname doesn't map
the principal to a local account, but a local username was specified,
that's okay.

-----
Marc Mengel <mengel@fnal.gov>

gssapi-patch
Description: gssapi fix