dovecot-2.0: gssapi: Don't do krb5_kuserok() to authz_name. It s...

[dovecot at dovecot.org]

details:   http://hg.dovecot.org/dovecot-2.0/rev/c163bc483c9e
changeset: 9670:c163bc483c9e
user:      Timo Sirainen <tss at iki.fi>
date:      Sun Jul 26 22:00:46 2009 -0400
description:
gssapi: Don't do krb5_kuserok() to authz_name. It shouldn't be necessary.

diffstat:

1 file changed, 6 deletions(-)
src/auth/mech-gssapi.c |    6 ------

diffs (16 lines):

diff -r 6cc6913fee1c -r c163bc483c9e src/auth/mech-gssapi.c
--- a/src/auth/mech-gssapi.c	Sun Jul 26 20:59:40 2009 -0400
+++ b/src/auth/mech-gssapi.c	Sun Jul 26 22:00:46 2009 -0400
@@ -443,12 +443,6 @@ mech_gssapi_userok(struct gssapi_auth_re
 		return -1;
 	}
 
-	if (!mech_gssapi_krb5_userok(request, request->authz_name,
-				     login_user, FALSE)) {
-		auth_request_log_info(auth_request, "gssapi",
-			"authz_name (%s) not authorized", login_user);
-		return -1;
-	}
 	return 0;
 #else
 	auth_request_log_info(auth_request, "gssapi",