--- a/plugins/mod_legacyauth.lua	Thu Sep 13 18:31:34 2012 +0100
+++ b/plugins/mod_legacyauth.lua	Thu Sep 13 18:48:35 2012 +0100
@@ -35,7 +35,7 @@
 	local session, stanza = event.origin, event.stanza;
 
 	if session.type ~= "c2s_unauthed" then
-		session.send(st.error_reply(stanza, "cancel", "service-unavailable", "Legacy authentication is only allowed for unauthenticated client connections."));
+		(session.sends2s or session.send)(st.error_reply(stanza, "cancel", "service-unavailable", "Legacy authentication is only allowed for unauthenticated client connections."));
 		return true;
 	end