From 8ec4f23701bcae2b03f12199382d73c7ba79716a Mon Sep 17 00:00:00 2001
From: Viktor Dukhovni <viktor@twosigma.com>
Date: Tue, 5 Dec 2017 19:01:04 -0500
Subject: [PATCH] Hide principal names in errors with FAST

---
 kdc/fast.c | 10 ++++------
 1 file changed, 4 insertions(+), 6 deletions(-)

diff --git a/kdc/fast.c b/kdc/fast.c
index 3b3621037..4baa60446 100644
--- a/kdc/fast.c
+++ b/kdc/fast.c
@@ -286,12 +286,10 @@ _kdc_fast_mk_error(krb5_context context,
 	    return ret;
 	}
 
-	if (/* hide_principal */ 0) {
-	    error_client_name = NULL;
-	    error_client_realm = NULL;
-	    error_server = NULL;
-	    e_text = NULL;
-	}
+        error_client_name = NULL;
+        error_client_realm = NULL;
+        error_server = NULL;
+        e_text = NULL;
 
 	if (r)
 	    ret = fast_add_cookie(r, error_method);