kdc: correct logic error in altsecid_gss_preauth_authorizer

check for the absence, not presence, of a GSS credential before acquiring one

diff --git a/kdc/altsecid_gss_preauth_authorizer.c b/kdc/altsecid_gss_preauth_authorizer.c
index ae1edb1d47895a4daeb1be981d4726163e7af340..8acce3a8095297c37303b10c5a56a307016a5f22 100644 (file)
--- a/kdc/altsecid_gss_preauth_authorizer.c
+++ b/kdc/altsecid_gss_preauth_authorizer.c
@@ -201,7 +201,7 @@ ad_connect(krb5_context context,
     }
 
 #ifdef LDAP_OPT_X_SASL_GSS_CREDS
-    if (server->gss_cred != GSS_C_NO_CREDENTIAL) {
+    if (server->gss_cred == GSS_C_NO_CREDENTIAL) {
         ret = ad_acquire_cred(context, realm, server);
         if (ret)
             goto out;