From f13924f2673391544fbdb6a205ebb2f85830faa6 Mon Sep 17 00:00:00 2001
From: Nicolas Williams <nico@cryptonector.com>
Date: Thu, 16 Feb 2012 18:39:14 -0600
Subject: [PATCH] Fix TGS client to request renewable/forwardable/proxiable if
 possible

    This is necessary because some applications actually need or run
    better with renewable service tickets.  kca is an example
    application; AFS tokens are also another example.
---
 lib/krb5/get_cred.c | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/lib/krb5/get_cred.c b/lib/krb5/get_cred.c
index ff95e1052..95dedb76a 100644
--- a/lib/krb5/get_cred.c
+++ b/lib/krb5/get_cred.c
@@ -1076,6 +1076,13 @@ _krb5_get_cred_kdc_any(krb5_context context,
 	context->kdc_usec_offset = 0;
     }
 
+    if (in_creds->flags.b.renewable)
+	flags.b.renewable = 1;
+    if (in_creds->flags.b.forwardable)
+	flags.b.forwardable = 1;
+    if (in_creds->flags.b.proxiable)
+	flags.b.proxiable = 1;
+
     ret = get_cred_kdc_referral(context,
 				flags,
 				ccache,