don't abort gsskex if client gives a limited proxy.

we'll deal with it gracefully in userauth.

diff --git a/openssh/kexgsss.c b/openssh/kexgsss.c
index b4e0f2cd9eee7ccb067bbcad9bea951c27f4a96d..468f410acda487935a1c2c74c46086ef3751c937 100644 (file)
--- a/openssh/kexgsss.c
+++ b/openssh/kexgsss.c
@@ -112,12 +112,6 @@ kexgss_server(Kex *kex)
 
                gss_release_buffer(&min_status,&recv_tok);
                
-#ifdef GSS_C_GLOBUS_LIMITED_PROXY_FLAG
-                if (ret_flags & GSS_C_GLOBUS_LIMITED_PROXY_FLAG) {
-                        packet_disconnect("Limited proxy is not allowed in gssapi key exchange.");
-                }
-#endif
-
                if (maj_status!=GSS_S_COMPLETE && send_tok.length==0) {
                        fatal("Zero length token output when incomplete");
                }