s4:mitkdc: Set KRB5_KDB_NO_AUTH_DATA_REQUIRED based on sdb no_auth_data_reqd

This needs to be set so that the MIT KDC >= 1.20 will not call the handle_pac()
function which executes the issue_pac KDB callback.

Pair-Programmed-With: Alexander Bokovoy <ab@samba.org>
Signed-off-by: Alexander Bokovoy <ab@samba.org>
Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>

diff --git a/source4/kdc/sdb_to_kdb.c b/source4/kdc/sdb_to_kdb.c
index 2981f1803338b8e95e605e3933cbbb7222853b38..4aefefa40961d2a5202bc2543fdc6be671041d16 100644 (file)
--- a/source4/kdc/sdb_to_kdb.c
+++ b/source4/kdc/sdb_to_kdb.c
@@ -86,6 +86,9 @@ static int SDBFlags_to_kflags(const struct SDBFlags *s,
        if (s->allow_digest) {
                ;
        }
+       if (s->no_auth_data_reqd) {
+               *k |= KRB5_KDB_NO_AUTH_DATA_REQUIRED;
+       }
 
        return 0;
 }