[PATCH 8/9] kerberos: Don't include GSS_C_DCE_STYLE in default gss_init_sec_context() flags.

Dmitry Timoshkov dmitry at baikal.ru
Wed Jan 24 21:34:00 CST 2018


Otherwise the returned ticket won't be accepted by WWW server when wrapped
in an HTTP request.

Original Rob's patch doesn't have this flag either.

This patch is one of the fixes to make Kerberos Authentication Tester work.

Signed-off-by: Dmitry Timoshkov <dmitry at baikal.ru>
---
 dlls/kerberos/krb5_ap.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dlls/kerberos/krb5_ap.c b/dlls/kerberos/krb5_ap.c
index ba89806957..66c795c377 100644
--- a/dlls/kerberos/krb5_ap.c
+++ b/dlls/kerberos/krb5_ap.c
@@ -326,7 +326,7 @@ static SECURITY_STATUS name_sspi_to_gss( const UNICODE_STRING *name_str, gss_nam
 
 static ULONG flags_isc_req_to_gss( ULONG flags )
 {
-    ULONG ret = GSS_C_DCE_STYLE;
+    ULONG ret = 0;
     if (flags & ISC_REQ_DELEGATE)        ret |= GSS_C_DELEG_FLAG;
     if (flags & ISC_REQ_MUTUAL_AUTH)     ret |= GSS_C_MUTUAL_FLAG;
     if (flags & ISC_REQ_REPLAY_DETECT)   ret |= GSS_C_REPLAY_FLAG;
-- 
2.15.1




More information about the wine-devel mailing list