From: Andreas Schneider Date: Wed, 10 Sep 2025 13:13:37 +0000 (+0200) Subject: s4:auth: Fix 'no delegation' logic in gensec_gssapi_start() X-Git-Tag: samba-4.23.0~2 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=c51f476794abaa81460f7af46efeb0cd5d6bb0c9;p=thirdparty%2Fsamba.git s4:auth: Fix 'no delegation' logic in gensec_gssapi_start() This fixes samba4.ntvfs.cifs.krb5.base.lock test with MIT Kerberos. BUG: https://bugzilla.samba.org/show_bug.cgi?id=15912 Signed-off-by: Andreas Schneider Signed-off-by: Stefan Metzmacher Pair-Programmed-With: Stefan Metzmacher Reviewed-by: Alexander Bokovoy (cherry picked from commit 66d3e5e49d34b0a4bfb8f2c862d48d11e27b2ea2) Autobuild-User(v4-23-test): Jule Anger Autobuild-Date(v4-23-test): Fri Sep 12 07:23:04 UTC 2025 on atb-devel-224 --- diff --git a/source4/auth/gensec/gensec_gssapi.c b/source4/auth/gensec/gensec_gssapi.c index c43dc66ab4a..6eef0547e1d 100644 --- a/source4/auth/gensec/gensec_gssapi.c +++ b/source4/auth/gensec/gensec_gssapi.c @@ -200,7 +200,7 @@ static NTSTATUS gensec_gssapi_start(struct gensec_security *gensec_security) if (gensec_setting_bool(gensec_security->settings, "gensec_gssapi", "sequence", true)) { gensec_gssapi_state->gss_want_flags |= GSS_C_SEQUENCE_FLAG; } - if (!(gensec_security->want_features & GENSEC_FEATURE_NO_DELEGATION)) { + if (gensec_security->want_features & GENSEC_FEATURE_NO_DELEGATION) { gensec_gssapi_state->gss_want_flags &= ~GSS_C_DELEG_FLAG; gensec_gssapi_state->gss_want_flags &= ~GSS_C_DELEG_POLICY_FLAG; }