Don't use PA_PSEUDO in pkinit client code

PA_PSEUDO only has meaning for kdcpreauth modules.  Don't use it in
the flags method of the pkinit clpreauth module.

diff --git a/src/plugins/preauth/pkinit/pkinit_clnt.c b/src/plugins/preauth/pkinit/pkinit_clnt.c
index f84012cfd9dd65fa2445a11b4b9507470d3b4a46..7a069c1ed6c95fd5ef2a14994eb1b020e326bce1 100644 (file)
--- a/src/plugins/preauth/pkinit/pkinit_clnt.c
+++ b/src/plugins/preauth/pkinit/pkinit_clnt.c
@@ -1230,7 +1230,7 @@ static int
 pkinit_client_get_flags(krb5_context kcontext, krb5_preauthtype patype)
 {
     if (patype == KRB5_PADATA_PKINIT_KX)
-        return PA_INFO|PA_PSEUDO;
+        return PA_INFO;
     return PA_REAL;
 }