s4:kdc: Adapt wamba_wdc_check_client_access() to modern Heimdal

Modern Heimdal falls back to kdc_check_flags() internally
when KRB5_PLUGIN_NO_HANDLE is returned, avoiding the need
to call back into the internal KDC APIs.

Selected from patch by by Stefan Metzmacher <metze@samba.org>
from his Heimdal upgrade branch.

NOTE: THIS COMMIT WON'T COMPILE/WORK ON ITS OWN!

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>

diff --git a/source4/kdc/wdc-samba4.c b/source4/kdc/wdc-samba4.c
index 50e3d135c1b4791675607b02a1f8b10be523c129..5552297fd96656434ff89ffa5a4617aec3a6e20a 100644 (file)
--- a/source4/kdc/wdc-samba4.c
+++ b/source4/kdc/wdc-samba4.c
@@ -887,10 +887,7 @@ static krb5_error_code samba_wdc_check_client_access(void *priv,
        }
 
        /* Now do the standard Heimdal check */
-       return kdc_check_flags(context, config,
-                              client_ex, client_name,
-                              server_ex, server_name,
-                              req->msg_type == krb_as_req);
+       return KRB5_PLUGIN_NO_HANDLE;
 }
 
 static krb5_error_code samba_wdc_plugin_init(krb5_context context, void **ptr)