summaryrefslogtreecommitdiff
path: root/source4/heimdal/lib/gssapi
diff options
context:
space:
mode:
authorAndrew Bartlett <abartlet@samba.org>2009-07-14 13:22:38 +1000
committerAndrew Bartlett <abartlet@samba.org>2009-07-16 09:23:35 +1000
commit84dca625cab96f72123308d80a5aeed5fc42f0c5 (patch)
tree26a32715bfb51d739064d2a4498ea4af235e2989 /source4/heimdal/lib/gssapi
parentbc354fb1a6fd524629434c199e2ca260a8400bb4 (diff)
downloadsamba-84dca625cab96f72123308d80a5aeed5fc42f0c5.tar.gz
samba-84dca625cab96f72123308d80a5aeed5fc42f0c5.tar.bz2
samba-84dca625cab96f72123308d80a5aeed5fc42f0c5.zip
s4:heimdal The implied GSS_C_MUTUAL_FLAG depends on AP_OPTS_MUTUAL_REQUIRED
We had previously assumed it was unconditional. Samba3 didn't mind very much, but Samba4's samba3-like client did, and the behaviour differed to Win2008 behaviour. Andrew Bartlett
Diffstat (limited to 'source4/heimdal/lib/gssapi')
-rw-r--r--source4/heimdal/lib/gssapi/krb5/accept_sec_context.c5
1 files changed, 4 insertions, 1 deletions
diff --git a/source4/heimdal/lib/gssapi/krb5/accept_sec_context.c b/source4/heimdal/lib/gssapi/krb5/accept_sec_context.c
index e0944852a7..8ead2bdf75 100644
--- a/source4/heimdal/lib/gssapi/krb5/accept_sec_context.c
+++ b/source4/heimdal/lib/gssapi/krb5/accept_sec_context.c
@@ -522,7 +522,10 @@ gsskrb5_acceptor_start(OM_uint32 * minor_status,
* Samba style get some flags (but not DCE-STYLE)
*/
ctx->flags =
- GSS_C_MUTUAL_FLAG | GSS_C_REPLAY_FLAG | GSS_C_SEQUENCE_FLAG;
+ GSS_C_REPLAY_FLAG | GSS_C_SEQUENCE_FLAG;
+ if (ap_options & AP_OPTS_MUTUAL_REQUIRED) {
+ ctx->flags |= GSS_C_MUTUAL_FLAG;
+ }
}
}