# HG changeset patch
# User Timo Sirainen <tss@iki.fi>
# Date 1248660046 14400
# Node ID 1b3e90e829def0a12cc89d1e06f9d5ea6268b859
# Parent  d38e0412cfb43f7d621d3d6adb15945072cf1c8c
gssapi: Don't do krb5_kuserok() to authz_name. It shouldn't be necessary.

diff -r d38e0412cfb4 -r 1b3e90e829de src/auth/mech-gssapi.c
--- a/src/auth/mech-gssapi.c	Sun Jul 26 21:56:17 2009 -0400
+++ b/src/auth/mech-gssapi.c	Sun Jul 26 22:00:46 2009 -0400
@@ -442,12 +442,6 @@
 		return -1;
 	}
 
-	if (!mech_gssapi_krb5_userok(request, request->authz_name,
-				     login_user, FALSE)) {
-		auth_request_log_info(auth_request, "gssapi",
-			"authz_name (%s) not authorized", login_user);
-		return -1;
-	}
 	return 0;
 #else
 	auth_request_log_info(auth_request, "gssapi",