From: Andreas Schneider Date: Wed, 10 Sep 2025 13:13:37 +0000 (+0200) Subject: s4:auth: Fix 'no delegation' logic in gensec_gssapi_start() X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=66d3e5e49d34b0a4bfb8f2c862d48d11e27b2ea2;p=thirdparty%2Fsamba.git s4:auth: Fix 'no delegation' logic in gensec_gssapi_start() This fixes samba4.ntvfs.cifs.krb5.base.lock test with MIT Kerberos. BUG: https://bugzilla.samba.org/show_bug.cgi?id=15912 Signed-off-by: Andreas Schneider Signed-off-by: Stefan Metzmacher Pair-Programmed-With: Stefan Metzmacher Reviewed-by: Alexander Bokovoy --- diff --git a/source4/auth/gensec/gensec_gssapi.c b/source4/auth/gensec/gensec_gssapi.c index 346406bf13b..02cf7961ee4 100644 --- a/source4/auth/gensec/gensec_gssapi.c +++ b/source4/auth/gensec/gensec_gssapi.c @@ -200,7 +200,7 @@ static NTSTATUS gensec_gssapi_start(struct gensec_security *gensec_security) if (gensec_setting_bool(gensec_security->settings, "gensec_gssapi", "sequence", true)) { gensec_gssapi_state->gss_want_flags |= GSS_C_SEQUENCE_FLAG; } - if (!(gensec_security->want_features & GENSEC_FEATURE_NO_DELEGATION)) { + if (gensec_security->want_features & GENSEC_FEATURE_NO_DELEGATION) { gensec_gssapi_state->gss_want_flags &= ~GSS_C_DELEG_FLAG; gensec_gssapi_state->gss_want_flags &= ~GSS_C_DELEG_POLICY_FLAG; }