auth: nopassword field is specific to a single passdb, remove before next passdb...

diff --git a/src/auth/auth-request.c b/src/auth/auth-request.c
index 6694bf9df54a1e7a935509351d8b21f8bf040b62..344d45a606b6bb226c22376c96d88e8a9e97a8fe 100644 (file)
--- a/src/auth/auth-request.c
+++ b/src/auth/auth-request.c
@@ -610,6 +610,9 @@ auth_request_handle_passdb_callback(enum passdb_result *result,
                request->passdb_success = FALSE;
                break;
        }
+       /* nopassword check is specific to a single passdb and shouldn't leak
+          to the next one. we already added it to cache. */
+       auth_fields_remove(request->extra_fields, "nopassword");
 
        if (request->requested_login_user != NULL &&
            *result == PASSDB_RESULT_OK) {