Only check for anonymous if pkinit_identity is given a principal; the KDC does not...

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/anonymous@23495 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/plugins/preauth/pkinit/pkinit_identity.c b/src/plugins/preauth/pkinit/pkinit_identity.c
index 0ab214cf08c82b22aed90376685a23f05baa4a6f..51a96dbd04c3182f0b0d2c5439f25dc1cdaed3e5 100644 (file)
--- a/src/plugins/preauth/pkinit/pkinit_identity.c
+++ b/src/plugins/preauth/pkinit/pkinit_identity.c
@@ -505,7 +505,7 @@ pkinit_identity_initialize(krb5_context context,
     int i;
 
     pkiDebug("%s: %p %p %p\n", __FUNCTION__, context, idopts, id_cryptoctx);
-    if (!krb5_principal_compare_any_realm (context, princ, krb5_anonymous_principal())) {
+    if (princ && !krb5_principal_compare_any_realm (context, princ, krb5_anonymous_principal())) {
         if (idopts == NULL || id_cryptoctx == NULL)
             goto errout;