r24062: fix logic for broken krb5 libs which always force

sign and seal...

metze

diff --git a/source/libads/sasl.c b/source/libads/sasl.c
index 6c5a518e6aeaa48fc72e982fbd2b0f12261af7bd..f5e540d3044f5ac9565bbf48a06b709c94c9d293 100644 (file)
--- a/source/libads/sasl.c
+++ b/source/libads/sasl.c
@@ -486,7 +486,8 @@ static ADS_STATUS ads_sasl_spnego_gsskrb5_bind(ADS_STRUCT *ads, const char *snam
                status = ADS_ERROR_NT(NT_STATUS_NOT_SUPPORTED);
                goto failed;
 
-       } else if (req_flags & GSS_C_INTEG_FLAG) {
+       } else if ((req_flags & GSS_C_INTEG_FLAG) &&
+                  !(ret_flags & GSS_C_INTEG_FLAG)) {
                /*
                 * here we wanted siging but didn't got it
                 * from the gssapi library