s4-gensec Remove fallback for simple privileges
authorAndrew Bartlett <abartlet@samba.org>
Thu, 29 Dec 2011 01:00:21 +0000 (12:00 +1100)
committerAndrew Bartlett <abartlet@samba.org>
Thu, 29 Dec 2011 03:01:56 +0000 (14:01 +1100)
This makes the dependencies simpler, as this code path is no longer
required.  (That is, it makes no sense to have an NTLM login without
an auth context, and the gensec_gssapi and gensec_krb5 modules call
the PAC blob function below instead).

Andrew Bartlett

source4/auth/gensec/gensec_util.c

index 2b890239b0528b211dd746f86f80a51df5318b85..d767f902d69e4b466aef6f492f9092ada843313e 100644 (file)
@@ -50,12 +50,8 @@ NTSTATUS gensec_generate_session_info(TALLOC_CTX *mem_ctx,
                                                                                 session_info_flags,
                                                                                 session_info);
        } else {
-               session_info_flags |= AUTH_SESSION_INFO_SIMPLE_PRIVILEGES;
-               nt_status = auth_generate_session_info(mem_ctx,
-                                                      NULL,
-                                                      NULL,
-                                                      user_info_dc, session_info_flags,
-                                                      session_info);
+               DEBUG(0, ("Cannot generate a session_info without the auth_context\n"));
+               return NT_STATUS_INTERNAL_ERROR;
        }
        return nt_status;
 }