(krb5_get_creds): if KRB5_GC_CONSTRAINED_DELEGATION is set, set both

request_anonymous and constrained_delegation. git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21253 ec53bebd-3082-4978-b11e-865c3cabbd6b
heimdal · Jun 21, 2007 · d5bb7a7 · d5bb7a7
1 parent 42bf411
commit d5bb7a7
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/lib/krb5/get_cred.c b/lib/krb5/get_cred.c
@@ -1191,6 +1191,10 @@ krb5_get_creds(krb5_context context,
 	flags.b.forwardable = 1;
     if (options & KRB5_GC_NO_TRANSIT_CHECK)
 	flags.b.disable_transited_check = 1;
+    if (options & KRB5_GC_CONSTRAINED_DELEGATION) {
+	flags.b.request_anonymous = 1; /* XXX ARGH confusion */
+	flags.b.constrained_delegation = 1;
+    }
 
     tgts = NULL;
     ret = get_cred_from_kdc_flags(context, flags, ccache,