gsskrb5: just don't force, but allow the flags when GSS_CF_NO_CI_FLAGS is given

metze

diff --git a/source/heimdal/lib/gssapi/krb5/init_sec_context.c b/source/heimdal/lib/gssapi/krb5/init_sec_context.c
index ab7624eef0e4bbd63d204b070804e6b09f3c998f..c455a5dc8b7246c0c8e795206be5b9c3db114cb8 100644 (file)
--- a/source/heimdal/lib/gssapi/krb5/init_sec_context.c
+++ b/source/heimdal/lib/gssapi/krb5/init_sec_context.c
@@ -490,6 +490,12 @@ init_auth
     if (req_flags & GSS_C_EXTENDED_ERROR_FLAG)
        flags |= GSS_C_EXTENDED_ERROR_FLAG;
 
+    if (req_flags & GSS_C_CONF_FLAG) {
+       flags |= GSS_C_CONF_FLAG;
+    }
+    if (req_flags & GSS_C_INTEG_FLAG) {
+       flags |= GSS_C_INTEG_FLAG;
+    }
     if (cred == NULL || !(cred->cred_flags & GSS_CF_NO_CI_FLAGS)) {
        flags |= GSS_C_CONF_FLAG;
        flags |= GSS_C_INTEG_FLAG;