base.m4: Check that the ident daemon actually gave us an answer.

diff --git a/base.m4 b/base.m4
index 204be0aeec02aadfd62cbe8250de33bd5a8e65be..d312eb51e91751aea84b0b80b4cfe381db541e3c 100644 (file)
--- a/base.m4
+++ b/base.m4
@@ -260,12 +260,12 @@ mail_check_auth:
        warn     set acl_c_user = $authenticated_id
                 hosts = +thishost
                !authenticated = *
+                condition = ${if def:sender_ident}
                 set acl_c_user = $sender_ident
 
-       ## User must be authenticated.
+       ## User must be authenticated by now.
        deny     message = Sender not authenticated
-               !hosts = +thishost
-               !authenticated = *
+                condition = ${if !def:acl_c_user}
 
        ## Make sure that the local part is one that the authenticated sender
        ## is allowed to claim.