From c3b0bfb9277b2e5de6b5246290b2cbe89989c115 Mon Sep 17 00:00:00 2001 From: Greg Hudson Date: Mon, 22 Oct 2012 01:56:33 -0400 Subject: Don't use PA_PSEUDO in pkinit client code PA_PSEUDO only has meaning for kdcpreauth modules. Don't use it in the flags method of the pkinit clpreauth module. --- src/plugins/preauth/pkinit/pkinit_clnt.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/plugins') diff --git a/src/plugins/preauth/pkinit/pkinit_clnt.c b/src/plugins/preauth/pkinit/pkinit_clnt.c index f84012cfd..7a069c1ed 100644 --- a/src/plugins/preauth/pkinit/pkinit_clnt.c +++ b/src/plugins/preauth/pkinit/pkinit_clnt.c @@ -1230,7 +1230,7 @@ static int pkinit_client_get_flags(krb5_context kcontext, krb5_preauthtype patype) { if (patype == KRB5_PADATA_PKINIT_KX) - return PA_INFO|PA_PSEUDO; + return PA_INFO; return PA_REAL; } -- cgit