dovecot-1.2: gssapi: Don't do krb5_kuserok() to authz_name. It s...
dovecot at dovecot.org
dovecot at dovecot.org
Mon Jul 27 05:00:57 EEST 2009
details: http://hg.dovecot.org/dovecot-1.2/rev/1b3e90e829de
changeset: 9257:1b3e90e829de
user: Timo Sirainen <tss at iki.fi>
date: Sun Jul 26 22:00:46 2009 -0400
description:
gssapi: Don't do krb5_kuserok() to authz_name. It shouldn't be necessary.
diffstat:
1 file changed, 6 deletions(-)
src/auth/mech-gssapi.c | 6 ------
diffs (16 lines):
diff -r d38e0412cfb4 -r 1b3e90e829de src/auth/mech-gssapi.c
--- a/src/auth/mech-gssapi.c Sun Jul 26 21:56:17 2009 -0400
+++ b/src/auth/mech-gssapi.c Sun Jul 26 22:00:46 2009 -0400
@@ -442,12 +442,6 @@ mech_gssapi_userok(struct gssapi_auth_re
return -1;
}
- if (!mech_gssapi_krb5_userok(request, request->authz_name,
- login_user, FALSE)) {
- auth_request_log_info(auth_request, "gssapi",
- "authz_name (%s) not authorized", login_user);
- return -1;
- }
return 0;
#else
auth_request_log_info(auth_request, "gssapi",
More information about the dovecot-cvs
mailing list