sbonazzo / rpms / cyrus-sasl

Forked from rpms/cyrus-sasl 2 years ago
Clone

Blame SOURCES/cyrus-sasl-2.1.26-revert-gssapi-flags.patch

b9abc1
--- cyrus-sasl2.orig/plugins/gssapi.c
b9abc1
+++ cyrus-sasl2/plugins/gssapi.c
b9abc1
@@ -1583,10 +1583,10 @@ static int gssapi_client_mech_step(void
b9abc1
 	}
b9abc1
 
b9abc1
 	/* Setup req_flags properly */
b9abc1
-	req_flags = GSS_C_INTEG_FLAG;
b9abc1
+	req_flags = GSS_C_MUTUAL_FLAG | GSS_C_SEQUENCE_FLAG;
b9abc1
 	if (params->props.max_ssf > params->external_ssf) {
b9abc1
 	    /* We are requesting a security layer */
b9abc1
-	    req_flags |= GSS_C_MUTUAL_FLAG | GSS_C_SEQUENCE_FLAG;
b9abc1
+	    req_flags |= GSS_C_INTEG_FLAG;
b9abc1
 	    /* Any SSF bigger than 1 is confidentiality. */
b9abc1
 	    /* Let's check if the client of the API requires confidentiality,
b9abc1
 	       and it wasn't already provided by an external layer */
b9abc1