Don't wipe the PAC checksums, the caller may actually need them.

(This used to be commit 9db5a966fce0b71a0d2167b4aff70cc081abc1cc)

diff --git a/source4/heimdal/lib/krb5/pac.c b/source4/heimdal/lib/krb5/pac.c
index ac7e3eda9b0ce63c8613d90f43b97b2bf093e9a8..9a145c48e6decff18e9c99fce1fc0345ada77636 100644 (file)
--- a/source4/heimdal/lib/krb5/pac.c
+++ b/source4/heimdal/lib/krb5/pac.c
@@ -324,20 +324,6 @@ krb5_pac_get_buffer(krb5_context context, krb5_pac p,
     krb5_error_code ret;
     uint32_t i;
 
-    /*
-     * Hide the checksums from external consumers
-     */
-
-    if (type == PAC_PRIVSVR_CHECKSUM || type == PAC_SERVER_CHECKSUM) {
-       ret = krb5_data_alloc(data, 16);
-       if (ret) {
-           krb5_set_error_message(context, ret, "malloc: out of memory");
-           return ret;
-       }
-       memset(data->data, 0, data->length);
-       return 0;
-    }
-
     for (i = 0; i < p->pac->numbuffers; i++) {
        size_t len = p->pac->buffers[i].buffersize;
        size_t offset = p->pac->buffers[i].offset_lo;