[packages/cyrus-sasl.git] / 0032-revert_1.103_revision_to_unbreak_GSSAPI.patch

--- a/plugins/gssapi.c
+++ b/plugins/gssapi.c
@@ -1480,10 +1480,10 @@ static int gssapi_client_mech_step(void
 	}
 
 	/* Setup req_flags properly */
-	req_flags = GSS_C_INTEG_FLAG;
+	req_flags = GSS_C_MUTUAL_FLAG | GSS_C_SEQUENCE_FLAG;
 	if (params->props.max_ssf > params->external_ssf) {
 	    /* We are requesting a security layer */
-	    req_flags |= GSS_C_MUTUAL_FLAG | GSS_C_SEQUENCE_FLAG;
+	    req_flags |= GSS_C_INTEG_FLAG;
 	    /* Any SSF bigger than 1 is confidentiality. */
 	    /* Let's check if the client of the API requires confidentiality,
 	       and it wasn't already provided by an external layer */
Commit	Line	Data
c29ea386 JR	1	--- a/plugins/gssapi.c
	2	+++ b/plugins/gssapi.c
	3	@@ -1480,10 +1480,10 @@ static int gssapi_client_mech_step(void
	4	}
	5
	6	/* Setup req_flags properly */
	7	- req_flags = GSS_C_INTEG_FLAG;
	8	+ req_flags = GSS_C_MUTUAL_FLAG \| GSS_C_SEQUENCE_FLAG;
	9	if (params->props.max_ssf > params->external_ssf) {
	10	/* We are requesting a security layer */
	11	- req_flags \|= GSS_C_MUTUAL_FLAG \| GSS_C_SEQUENCE_FLAG;
	12	+ req_flags \|= GSS_C_INTEG_FLAG;
	13	/* Any SSF bigger than 1 is confidentiality. */
	14	/* Let's check if the client of the API requires confidentiality,
	15	and it wasn't already provided by an external layer */