Don't revert something until you've seen if volker has already fixed it :-).

Jeremy.

diff --git a/source/libads/kerberos_verify.c b/source/libads/kerberos_verify.c
index 779028c7af9824608514e0dabd7f135fa19861a7..48b61cd1f2d054e9f4e89b9a9a508d248cc29ff2 100644 (file)
--- a/source/libads/kerberos_verify.c
+++ b/source/libads/kerberos_verify.c
@@ -140,7 +140,6 @@ NTSTATUS ads_verify_ticket(ADS_STRUCT *ads, const DATA_BLOB *ticket,
                goto out;
        }
 
-#if 0
        /* Lock a mutex surrounding the replay as there is no locking in the MIT krb5
         * code surrounding the replay cache... */
 
@@ -149,7 +148,6 @@ NTSTATUS ads_verify_ticket(ADS_STRUCT *ads, const DATA_BLOB *ticket,
                sret = NT_STATUS_LOGON_FAILURE;
                goto out;
        }
-#endif
 
        /* We need to setup a auth context with each possible encoding type in turn. */
        for (i=0;enctypes[i];i++) {
@@ -176,9 +174,7 @@ NTSTATUS ads_verify_ticket(ADS_STRUCT *ads, const DATA_BLOB *ticket,
                                (unsigned int)enctypes[i], error_message(ret)));
        }
 
-#if 0
        release_server_mutex();
-#endif
 
        if (!auth_ok) {
                DEBUG(3,("ads_verify_ticket: krb5_rd_req with auth failed (%s)\n",