]> eyrie.org Git - kerberos/krb5-sync.git/commitdiff
Correctly ignore ad_base_instance for enable and disable
authorRuss Allbery <eagle@eyrie.org>
Sat, 7 Dec 2013 03:54:29 +0000 (19:54 -0800)
committerRuss Allbery <eagle@eyrie.org>
Sat, 7 Dec 2013 03:54:29 +0000 (19:54 -0800)
The logic to ignore ad_base_instance for enable and disable was
accidentally skipped.

plugin/general.c

index c7f2731950d764cd86a0a4b93a3857b7961ada95..1639ddc7e6527af536e78a95062191e074b49bd2 100644 (file)
@@ -276,7 +276,7 @@ sync_status(kadm5_hook_modinfo *config, krb5_context ctx,
         return 0;
 
     /* Check if this principal should be synchronized. */
-    code = principal_allowed(config, ctx, principal, true, &allowed);
+    code = principal_allowed(config, ctx, principal, false, &allowed);
     if (code != 0)
         return code;
     if (!allowed)