From 8c3cf7265e5c660d6c6c307aabc3abc78db4fc47 Mon Sep 17 00:00:00 2001
From: Mike Wiesner <mwiesner@vmware.com>
Date: Mon, 21 Dec 2009 17:59:30 +0000
Subject: [PATCH] isInitiator should be false (was included in commit for
 SES-19)

---
 .../extensions/kerberos/SunJaasKerberosTicketValidator.java     | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/spring-security-kerberos-core/src/main/java/org/springframework/security/extensions/kerberos/SunJaasKerberosTicketValidator.java b/spring-security-kerberos-core/src/main/java/org/springframework/security/extensions/kerberos/SunJaasKerberosTicketValidator.java
index 585f86f..dc461a1 100644
--- a/spring-security-kerberos-core/src/main/java/org/springframework/security/extensions/kerberos/SunJaasKerberosTicketValidator.java
+++ b/spring-security-kerberos-core/src/main/java/org/springframework/security/extensions/kerberos/SunJaasKerberosTicketValidator.java
@@ -180,7 +180,7 @@ public class SunJaasKerberosTicketValidator implements KerberosTicketValidator,
             if (this.debug) {
                 options.put("debug", "true");
             }
-            options.put("isInitiator", "true");
+            options.put("isInitiator", "false");
 
             return new AppConfigurationEntry[] { new AppConfigurationEntry("com.sun.security.auth.module.Krb5LoginModule",
                     AppConfigurationEntry.LoginModuleControlFlag.REQUIRED, options), };