dovecot-2.0: gssapi: Don't do krb5_kuserok() to authz_name. It s...
dovecot at dovecot.org
dovecot at dovecot.org
Mon Jul 27 05:02:46 EEST 2009
details: http://hg.dovecot.org/dovecot-2.0/rev/c163bc483c9e
changeset: 9670:c163bc483c9e
user: Timo Sirainen <tss at iki.fi>
date: Sun Jul 26 22:00:46 2009 -0400
description:
gssapi: Don't do krb5_kuserok() to authz_name. It shouldn't be necessary.
diffstat:
1 file changed, 6 deletions(-)
src/auth/mech-gssapi.c | 6 ------
diffs (16 lines):
diff -r 6cc6913fee1c -r c163bc483c9e src/auth/mech-gssapi.c
--- a/src/auth/mech-gssapi.c Sun Jul 26 20:59:40 2009 -0400
+++ b/src/auth/mech-gssapi.c Sun Jul 26 22:00:46 2009 -0400
@@ -443,12 +443,6 @@ mech_gssapi_userok(struct gssapi_auth_re
return -1;
}
- if (!mech_gssapi_krb5_userok(request, request->authz_name,
- login_user, FALSE)) {
- auth_request_log_info(auth_request, "gssapi",
- "authz_name (%s) not authorized", login_user);
- return -1;
- }
return 0;
#else
auth_request_log_info(auth_request, "gssapi",
More information about the dovecot-cvs
mailing list