From cf1d223bd881e306722fde878774017de1c24cc6 Mon Sep 17 00:00:00 2001
From: Simo Sorce <ssorce@redhat.com>
Date: Mon, 5 Dec 2011 15:54:27 -0500
Subject: ipa-kdb: return properly when no PAC is available

---
 daemons/ipa-kdb/ipa_kdb_mspac.c | 13 +++----------
 1 file changed, 3 insertions(+), 10 deletions(-)

(limited to 'daemons')

diff --git a/daemons/ipa-kdb/ipa_kdb_mspac.c b/daemons/ipa-kdb/ipa_kdb_mspac.c
index 8f4affa4..7973e8c8 100644
--- a/daemons/ipa-kdb/ipa_kdb_mspac.c
+++ b/daemons/ipa-kdb/ipa_kdb_mspac.c
@@ -692,18 +692,11 @@ krb5_error_code ipadb_sign_authdata(krb5_context context,
             goto done;
         }
     }
-#if 0
-    if (pac == NULL && client != NULL) {
 
-        code = ks_get_pac(context, client, &pac);
-        if (code != 0) {
-            goto done;
-        }
-    }
-#endif
     if (pac == NULL) {
-        kerr = KRB5_PLUGIN_OP_NOTSUPP;
-/*        kerr = KRB5_KDB_DBTYPE_NOSUP; */
+        /* No PAC to deal with, proceed */
+        *signed_auth_data = NULL;
+        kerr = 0;
         goto done;
     }
 
-- 
cgit