s4:gensec/spnego: only generate the mechListMic when the server expects it

[ira/wip.git] / source4 / auth / gensec / spnego.c

diff --git a/source4/auth/gensec/spnego.c b/source4/auth/gensec/spnego.c
index 331d033524332f523bc948b43867accc5908982a..b3567202c16bc6f13ce10afdbbc6f118fe335462 100644 (file)
--- a/source4/auth/gensec/spnego.c
+++ b/source4/auth/gensec/spnego.c
@@ -1029,7 +1029,8 @@ static NTSTATUS gensec_spnego_update(struct gensec_security *gensec_security, TA
                                                  spnego.negTokenTarg.responseToken, 
                                                  &unwrapped_out);
 
-                       if (NT_STATUS_IS_OK(nt_status)) {
+                       if (NT_STATUS_IS_OK(nt_status)
+                           && spnego.negTokenTarg.negResult != SPNEGO_ACCEPT_COMPLETED) {
                                new_spnego = gensec_have_feature(spnego_state->sub_sec_security,
                                                                 GENSEC_FEATURE_NEW_SPNEGO);
                        }