From: Andrew Bartlett <abartlet@samba.org>
Date: Tue, 27 Dec 2011 11:02:16 +0000 (+1100)
Subject: s4-gensec: Allow a PAC to be obtained from any GSS mech
X-Git-Tag: tevent-0.9.15~589
X-Git-Url: http://git.samba.org/?p=ddiss%2Fsamba.git;a=commitdiff_plain;h=f7a866a17cd66d95e36248d7b88d9316d7e86e99

s4-gensec: Allow a PAC to be obtained from any GSS mech

This may allow Luke Howard's moonshot to work with a little less effort
at some point in the future.

Andrew Bartlett
---

diff --git a/source4/auth/gensec/gensec_gssapi.c b/source4/auth/gensec/gensec_gssapi.c
index 55c2970d5aa..78678cc9d8c 100644
--- a/source4/auth/gensec/gensec_gssapi.c
+++ b/source4/auth/gensec/gensec_gssapi.c
@@ -1314,13 +1314,6 @@ static NTSTATUS gensec_gssapi_session_info(struct gensec_security *gensec_securi
 	struct PAC_SIGNATURE_DATA *pac_srv_sig = NULL;
 	struct PAC_SIGNATURE_DATA *pac_kdc_sig = NULL;
 	
-	if ((gensec_gssapi_state->gss_oid->length != gss_mech_krb5->length)
-	    || (memcmp(gensec_gssapi_state->gss_oid->elements, gss_mech_krb5->elements, 
-		       gensec_gssapi_state->gss_oid->length) != 0)) {
-		DEBUG(1, ("NO session info available for this mech\n"));
-		return NT_STATUS_INVALID_PARAMETER;
-	}
-		
 	mem_ctx = talloc_named(mem_ctx_out, 0, "gensec_gssapi_session_info context");
 	NT_STATUS_HAVE_NO_MEMORY(mem_ctx);