From: Greg Hudson <ghudson@mit.edu>
Date: Sun, 4 Apr 2010 17:52:03 +0000 (+0000)
Subject: In the GSSAPI IAKERB code, fix the sense of the flags expected from
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=dfc6885609a77a74cb7d1d1e2e188f7a4481a562;p=thirdparty%2Fkrb5.git

In the GSSAPI IAKERB code, fix the sense of the flags expected from
krb5_init_creds_step and krb5_tkt_creds_step.

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/iakerb@23856 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/src/lib/gssapi/krb5/iakerb.c b/src/lib/gssapi/krb5/iakerb.c
index 33f7f90044..6c6cd3f97e 100644
--- a/src/lib/gssapi/krb5/iakerb.c
+++ b/src/lib/gssapi/krb5/iakerb.c
@@ -599,7 +599,7 @@ iakerb_initiator_step(iakerb_ctx_id_t ctx,
                                     &flags);
         if (code != 0)
             goto cleanup;
-        if (flags != 0) {
+        if ((flags & 1) != 1) {
             krb5_init_creds_get_times(ctx->k5c, ctx->u.icc, &times);
             cred->tgt_expire = times.endtime;
 
@@ -609,6 +609,7 @@ iakerb_initiator_step(iakerb_ctx_id_t ctx,
             ctx->state = IAKERB_TGS_REQ;
         } else
             break;
+        in = empty_data();
     case IAKERB_TGS_REQ:
         if (ctx->u.tcc == NULL) {
             code = iakerb_tkt_creds_ctx(ctx, cred, name, time_req);
@@ -618,7 +619,7 @@ iakerb_initiator_step(iakerb_ctx_id_t ctx,
 
         code = krb5_tkt_creds_step(ctx->k5c,
                                    ctx->u.tcc,
-                                   flags ? NULL : &in,
+                                   &in,
                                    &out,
                                    &realm,
                                    &flags);
@@ -627,7 +628,7 @@ iakerb_initiator_step(iakerb_ctx_id_t ctx,
             krb5_tkt_creds_store_creds(ctx->k5c, ctx->u.tcc, NULL);
             goto cleanup;
         }
-        if (flags != 0) {
+        if ((flags & 1) != 1) {
             code = krb5_tkt_creds_store_creds(ctx->k5c, ctx->u.tcc, NULL);
             if (code != 0)
                 goto cleanup;