From: Timo Sirainen <tss@iki.fi>
Date: Mon, 27 Jul 2009 02:00:46 +0000 (-0400)
Subject: gssapi: Don't do krb5_kuserok() to authz_name. It shouldn't be necessary.
X-Git-Tag: 2.0.alpha1~382
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=7dc0c3eba0fe9f24e88b6fd4fb4339f2ab42b815;p=thirdparty%2Fdovecot%2Fcore.git

gssapi: Don't do krb5_kuserok() to authz_name. It shouldn't be necessary.

--HG--
branch : HEAD
---

diff --git a/src/auth/mech-gssapi.c b/src/auth/mech-gssapi.c
index 065a0a7b59..9874e18a75 100644
--- a/src/auth/mech-gssapi.c
+++ b/src/auth/mech-gssapi.c
@@ -443,12 +443,6 @@ mech_gssapi_userok(struct gssapi_auth_request *request, const char *login_user)
 		return -1;
 	}
 
-	if (!mech_gssapi_krb5_userok(request, request->authz_name,
-				     login_user, FALSE)) {
-		auth_request_log_info(auth_request, "gssapi",
-			"authz_name (%s) not authorized", login_user);
-		return -1;
-	}
 	return 0;
 #else
 	auth_request_log_info(auth_request, "gssapi",