From: Greg Hudson <ghudson@mit.edu>
Date: Mon, 22 Oct 2012 05:56:33 +0000 (-0400)
Subject: Don't use PA_PSEUDO in pkinit client code
X-Git-Tag: krb5-1.12-alpha1~510
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=c3b0bfb9277b2e5de6b5246290b2cbe89989c115;p=thirdparty%2Fkrb5.git

Don't use PA_PSEUDO in pkinit client code

PA_PSEUDO only has meaning for kdcpreauth modules.  Don't use it in
the flags method of the pkinit clpreauth module.
---

diff --git a/src/plugins/preauth/pkinit/pkinit_clnt.c b/src/plugins/preauth/pkinit/pkinit_clnt.c
index f84012cfd9..7a069c1ed6 100644
--- a/src/plugins/preauth/pkinit/pkinit_clnt.c
+++ b/src/plugins/preauth/pkinit/pkinit_clnt.c
@@ -1230,7 +1230,7 @@ static int
 pkinit_client_get_flags(krb5_context kcontext, krb5_preauthtype patype)
 {
     if (patype == KRB5_PADATA_PKINIT_KX)
-        return PA_INFO|PA_PSEUDO;
+        return PA_INFO;
     return PA_REAL;
 }