From b4f6db40ab24742f4d9a8b1ff4885e62092b5930 Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Fri, 27 Jul 2007 07:19:36 +0000 Subject: r24062: fix logic for broken krb5 libs which always force sign and seal... metze (This used to be commit 4a4fc8cccbcbe17eebcefcd0107f7de60d751f5c) --- source3/libads/sasl.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'source3/libads/sasl.c') diff --git a/source3/libads/sasl.c b/source3/libads/sasl.c index 6c5a518e6a..f5e540d304 100644 --- a/source3/libads/sasl.c +++ b/source3/libads/sasl.c @@ -486,7 +486,8 @@ static ADS_STATUS ads_sasl_spnego_gsskrb5_bind(ADS_STRUCT *ads, const char *snam status = ADS_ERROR_NT(NT_STATUS_NOT_SUPPORTED); goto failed; - } else if (req_flags & GSS_C_INTEG_FLAG) { + } else if ((req_flags & GSS_C_INTEG_FLAG) && + !(ret_flags & GSS_C_INTEG_FLAG)) { /* * here we wanted siging but didn't got it * from the gssapi library -- cgit