3.1.1.1.2 Client Credential Handle

Client Credential Handle: A client credential handle is a reference to a specific set of client identity credentials. A client credential handle is a parameter used when creating a security context handle. The client credential handle is obtained by calling an implementation-specific equivalent of the abstract GSS_Acquire_cred call as specified in [RFC2743]. The handle and associated resources are released by calling the implementation-specific GSS_Release_cred equivalent.

The value of the client credential handle MAY be used to match client identities. In those implementations, if two handle value matches, then the client identities (and credentials) MUST be guaranteed to be the same.