heimdal:kdc: Always generate a PAC for S4U2Self

[samba.git] / source4 / heimdal / kdc / krb5tgs.c

diff --git a/source4/heimdal/kdc/krb5tgs.c b/source4/heimdal/kdc/krb5tgs.c
index 6c5c51aa44874bd391f4eb95b056dfc7b76f0c67..dc356b4daa55a2c60f9c35f8c099a508574e49f3 100644 (file)
--- a/source4/heimdal/kdc/krb5tgs.c
+++ b/source4/heimdal/kdc/krb5tgs.c
@@ -1846,12 +1846,13 @@ server_lookup:
            if (mspac) {
                krb5_pac_free(context, mspac);
                mspac = NULL;
-               ret = _kdc_pac_generate(context, s4u2self_impersonated_client, NULL, NULL, &mspac);
-               if (ret) {
-                   kdc_log(context, config, 0, "PAC generation failed for -- %s",
-                           tpn);
-                   goto out;
-               }
+           }
+
+           ret = _kdc_pac_generate(context, s4u2self_impersonated_client, NULL, NULL, &mspac);
+           if (ret) {
+               kdc_log(context, config, 0, "PAC generation failed for -- %s",
+                       tpn);
+               goto out;
            }
 
            /*