From f7a866a17cd66d95e36248d7b88d9316d7e86e99 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Tue, 27 Dec 2011 22:02:16 +1100 Subject: s4-gensec: Allow a PAC to be obtained from any GSS mech This may allow Luke Howard's moonshot to work with a little less effort at some point in the future. Andrew Bartlett --- source4/auth/gensec/gensec_gssapi.c | 7 ------- 1 file changed, 7 deletions(-) (limited to 'source4/auth/gensec/gensec_gssapi.c') diff --git a/source4/auth/gensec/gensec_gssapi.c b/source4/auth/gensec/gensec_gssapi.c index 55c2970d5a..78678cc9d8 100644 --- a/source4/auth/gensec/gensec_gssapi.c +++ b/source4/auth/gensec/gensec_gssapi.c @@ -1314,13 +1314,6 @@ static NTSTATUS gensec_gssapi_session_info(struct gensec_security *gensec_securi struct PAC_SIGNATURE_DATA *pac_srv_sig = NULL; struct PAC_SIGNATURE_DATA *pac_kdc_sig = NULL; - if ((gensec_gssapi_state->gss_oid->length != gss_mech_krb5->length) - || (memcmp(gensec_gssapi_state->gss_oid->elements, gss_mech_krb5->elements, - gensec_gssapi_state->gss_oid->length) != 0)) { - DEBUG(1, ("NO session info available for this mech\n")); - return NT_STATUS_INVALID_PARAMETER; - } - mem_ctx = talloc_named(mem_ctx_out, 0, "gensec_gssapi_session_info context"); NT_STATUS_HAVE_NO_MEMORY(mem_ctx); -- cgit