changeset 9257:1b3e90e829de HEAD

gssapi: Don't do krb5_kuserok() to authz_name. It shouldn't be necessary.
author Timo Sirainen <tss@iki.fi>
date Sun, 26 Jul 2009 22:00:46 -0400
parents d38e0412cfb4
children b36b0291e1c1
files src/auth/mech-gssapi.c
diffstat 1 files changed, 0 insertions(+), 6 deletions(-) [+]
line wrap: on
line diff
--- a/src/auth/mech-gssapi.c	Sun Jul 26 21:56:17 2009 -0400
+++ b/src/auth/mech-gssapi.c	Sun Jul 26 22:00:46 2009 -0400
@@ -442,12 +442,6 @@
 		return -1;
 	}
 
-	if (!mech_gssapi_krb5_userok(request, request->authz_name,
-				     login_user, FALSE)) {
-		auth_request_log_info(auth_request, "gssapi",
-			"authz_name (%s) not authorized", login_user);
-		return -1;
-	}
 	return 0;
 #else
 	auth_request_log_info(auth_request, "gssapi",