gssapi: Don't do krb5_kuserok() to authz_name. It shouldn't be necessary.

--HG--
branch : HEAD

diff --git a/src/auth/mech-gssapi.c b/src/auth/mech-gssapi.c
index 065a0a7b59e9847d838eab8c82bb2ee4f899917b..9874e18a75f2d36958aa08f6fb6df2ea283bc770 100644 (file)
--- a/src/auth/mech-gssapi.c
+++ b/src/auth/mech-gssapi.c
@@ -443,12 +443,6 @@ mech_gssapi_userok(struct gssapi_auth_request *request, const char *login_user)
                return -1;
        }
 
-       if (!mech_gssapi_krb5_userok(request, request->authz_name,
-                                    login_user, FALSE)) {
-               auth_request_log_info(auth_request, "gssapi",
-                       "authz_name (%s) not authorized", login_user);
-               return -1;
-       }
        return 0;
 #else
        auth_request_log_info(auth_request, "gssapi",