Hans Leidekker (@hans) commented about dlls/kerberos/unixlib.c:
pgss_release_buffer( &minor_status, &output_token ); ctxhandle_gss_to_sspi( ctx_handle, params->new_context );
if (params->context_attr) *params->context_attr = flags_gss_to_isc_ret( ret_flags );
if (params->context_attr) *params->context_attr |= flags_gss_to_isc_ret( ret_flags );
It would be better to add the flag in kerberos_SpInitLsaModeContext() when the context handle is created.