--- cyrus-sasl-2.1.26/plugins/gssapi.c	2014-07-23 20:52:55.211756954 -0600
+++ cyrus-sasl-2.1.26-patched/plugins/gssapi.c	2014-07-23 20:57:44.442268331 -0600
@@ -1586,10 +1586,10 @@
 	}
 
 	/* Setup req_flags properly */
-	req_flags = GSS_C_INTEG_FLAG;
+	req_flags = GSS_C_MUTUAL_FLAG | GSS_C_SEQUENCE_FLAG;
 	if (params->props.max_ssf > params->external_ssf) {
 	    /* We are requesting a security layer */
-	    req_flags |= GSS_C_MUTUAL_FLAG | GSS_C_SEQUENCE_FLAG;
+	    req_flags |= GSS_C_INTEG_FLAG;
 	    /* Any SSF bigger than 1 is confidentiality. */
 	    /* Let's check if the client of the API requires confidentiality,
 	       and it wasn't already provided by an external layer */