login: Skip auth penalty checks from IPs in login_trusted_networks.

diff --git a/src/login-common/sasl-server.c b/src/login-common/sasl-server.c
index 128edd548bcec7c83f4c371082cee04ec9d761b4..241915ee580e4bf9d636d11ae6b85c1c4289f6f8 100644 (file)
--- a/src/login-common/sasl-server.c
+++ b/src/login-common/sasl-server.c
@@ -67,6 +67,10 @@ client_get_auth_flags(struct client *client)
                auth_flags |= AUTH_REQUEST_FLAG_VALID_CLIENT_CERT;
        if (client->secured)
                auth_flags |= AUTH_REQUEST_FLAG_SECURED;
+       if (client->trusted) {
+               /* e.g. webmail */
+               auth_flags |= AUTH_REQUEST_FLAG_NO_PENALTY;
+       }
        return auth_flags;
 }