[PATCH 2/2] kerberos: When requested confidentiality InitializeSecurityContext() should also add integrity.

[Dmitry Timoshkov]

From: Dmitry Timoshkov

Manual testing shows that InitializeSecurityContext(ISC_REQ_CONFIDENTIALITY)
returns ISC_RET_INTEGRITY in attributes, but not the other way around.

Signed-off-by: Dmitry Timoshkov 
---
 dlls/kerberos/unixlib.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/dlls/kerberos/unixlib.c b/dlls/kerberos/unixlib.c
index 979e9e8c622..478ad0d4bbb 100644
--- a/dlls/kerberos/unixlib.c
+++ b/dlls/kerberos/unixlib.c
@@ -757,6 +757,8 @@ static NTSTATUS initialize_context( void *args )

if (params->target_name && (status = import_name( params->target_name, &target ))) return status;

+    if (req_flags & GSS_C_CONF_FLAG) req_flags |= GSS_C_INTEG_FLAG;
+
     ret = pgss_init_sec_context( &minor_status, cred_handle, &ctx_handle, target, GSS_C_NO_OID, req_flags, 0,
                                  GSS_C_NO_CHANNEL_BINDINGS, &input_token, NULL, &output_token, &ret_flags,
                                  &expiry_time );