From a03b0ce550be90b86811659897d85e32ce5d5ab8 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= <lha@kth.se>
Date: Thu, 4 Jan 2007 11:27:20 +0000
Subject: [PATCH] Make it possible to turn off PAC check, its default on.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19680 ec53bebd-3082-4978-b11e-865c3cabbd6b
---
 lib/krb5/rd_req.c | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/lib/krb5/rd_req.c b/lib/krb5/rd_req.c
index 7033ac495..02405a17d 100644
--- a/lib/krb5/rd_req.c
+++ b/lib/krb5/rd_req.c
@@ -513,6 +513,7 @@ krb5_verify_ap_req2(krb5_context context,
 struct krb5_rd_req_in_ctx {
     krb5_keytab keytab;
     krb5_keyblock *keyblock;
+    krb5_boolean no_pac_check;
 };
 
 struct krb5_rd_req_out_ctx {
@@ -545,6 +546,16 @@ krb5_rd_req_in_set_keytab(krb5_context context,
     return 0;
 }
 
+krb5_error_code KRB5_LIB_FUNCTION
+krb5_rd_req_in_set_pac_check(krb5_context context, 
+			     krb5_rd_req_in_ctx in,
+			     krb5_boolean flag)
+{
+    in->no_pac_check = !flag;
+    return 0;
+}
+
+
 krb5_error_code KRB5_LIB_FUNCTION
 krb5_rd_req_in_set_keyblock(krb5_context context, 
 			    krb5_rd_req_in_ctx in,
@@ -826,7 +837,7 @@ krb5_rd_req_ctx(krb5_context context,
 	goto out;
 
     /* If there is a PAC, verify its server signature */
-    {
+    if (inctx->no_pac_check == FALSE) {
 	krb5_pac pac;
 	krb5_data data;