From d4eeacdafb1163ddc2448a2d98e4c42b8b940579 Mon Sep 17 00:00:00 2001
From: Yuming Zhu <yzhu@redhat.com>
Date: Dec 06 2021 08:57:44 +0000
Subject: [hub] only raise error when authtype is not proxyauthtype


fixes: #3163

---

diff --git a/koji/auth.py b/koji/auth.py
index 0871ff8..3b4e62c 100644
--- a/koji/auth.py
+++ b/koji/auth.py
@@ -376,7 +376,7 @@ class Session(object):
 
             # in this point we can continue with proxied user in same way as if it is not proxied
             if proxyauthtype is not None:
-                if not context.opts['AllowProxyAuthType']:
+                if not context.opts['AllowProxyAuthType'] and authtype != proxyauthtype:
                     raise koji.AuthError("Proxy must use same auth mechanism as hub (behaviour "
                                          "can be overriden via AllowProxyAuthType hub option)")
                 if proxyauthtype not in (koji.AUTHTYPE_GSSAPI, koji.AUTHTYPE_SSL):