File _patchinfo of Package patchinfo.10711
<patchinfo incident="10711">
<issue tracker="bnc" id="1087481">Domain join fails with "net ads join" command when STARTTLS is enabled for ldap</issue>
<category>recommended</category>
<rating>moderate</rating>
<packager>scabrero</packager>
<description>This update for krb5 fixes the following issues:
- Add support for the GSS_KRB5_CRED_NO_CI_FLAGS_X cred option to
suppress sending the confidentiality and integrity flags in GSS
initiator tokens unless they are requested by the caller. These
flags control the negotiated SASL security layer for the Microsoft
GSS-SPNEGO SASL mechanism. (bsc#1087481).
</description>
<summary>Recommended update for krb5</summary>
</patchinfo>