From: Stefan Metzmacher <metze@samba.org>
Date: Fri, 27 Jul 2007 07:19:36 +0000 (+0000)
Subject: r24062: fix logic for broken krb5 libs which always force
X-Git-Tag: samba-4.0.0alpha6~801^2~5238
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=b4f6db40ab24742f4d9a8b1ff4885e62092b5930;p=thirdparty%2Fsamba.git

r24062: fix logic for broken krb5 libs which always force
sign and seal...

metze
(This used to be commit 4a4fc8cccbcbe17eebcefcd0107f7de60d751f5c)
---

diff --git a/source3/libads/sasl.c b/source3/libads/sasl.c
index 6c5a518e6ae..f5e540d3044 100644
--- a/source3/libads/sasl.c
+++ b/source3/libads/sasl.c
@@ -486,7 +486,8 @@ static ADS_STATUS ads_sasl_spnego_gsskrb5_bind(ADS_STRUCT *ads, const char *snam
 		status = ADS_ERROR_NT(NT_STATUS_NOT_SUPPORTED);
 		goto failed;
 
-	} else if (req_flags & GSS_C_INTEG_FLAG) {
+	} else if ((req_flags & GSS_C_INTEG_FLAG) &&
+		   !(ret_flags & GSS_C_INTEG_FLAG)) {
 		/*
 		 * here we wanted siging but didn't got it
 		 * from the gssapi library