[krbdev.mit.edu #5439] krb5_get_credentials special-cases error code when referral of

[The RT System itself via RT]

>From krb5-bugs-incoming-bounces at PCH.mit.edu  Mon Feb 12 16:55:25 2007
Received: from pch.mit.edu (PCH.MIT.EDU [18.7.21.90]) by krbdev.mit.edu (8.9.3p2) with ESMTP
	id QAA12275; Mon, 12 Feb 2007 16:55:25 -0500 (EST)
Received: from pch.mit.edu (pch.mit.edu [127.0.0.1])
	by pch.mit.edu (8.13.6/8.12.8) with ESMTP id l1CLstgV014825;
	Mon, 12 Feb 2007 16:54:55 -0500
Received: from fort-point-station.mit.edu (FORT-POINT-STATION.MIT.EDU
	[18.7.7.76])
	by pch.mit.edu (8.13.6/8.12.8) with ESMTP id l1CLUbVp001337
	for <krb5-bugs-incoming at PCH.mit.edu>; Mon, 12 Feb 2007 16:30:37 -0500
Received: from mit.edu (M24-004-BARRACUDA-3.MIT.EDU [18.7.7.114])
	by fort-point-station.mit.edu (8.13.6/8.9.2) with ESMTP id
	l1CLUBS1015412
	for <krb5-bugs at mit.edu>; Mon, 12 Feb 2007 16:30:12 -0500 (EST)
Received: from smtp.andrew.cmu.edu (SMTP.andrew.cmu.edu [128.2.10.212])
	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by mit.edu (Spam Firewall) with ESMTP id 75EDD2BB829
	for <krb5-bugs at mit.edu>; Mon, 12 Feb 2007 16:30:11 -0500 (EST)
Received: from SPHINX.andrew.cmu.edu (SPHINX.andrew.cmu.edu [128.2.121.9])
	(user=cg2v mech=GSSAPI (0 bits))
	by smtp.andrew.cmu.edu (8.13.6/8.13.6) with ESMTP id l1CLUAD8013175
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT)
	for <krb5-bugs at mit.edu>; Mon, 12 Feb 2007 16:30:10 -0500
Date: Mon, 12 Feb 2007 16:30:10 -0500
From: Chaskiel M Grundman <cg2v at andrew.cmu.edu>
To: krb5-bugs at mit.edu
Subject: krb5_get_credentials special-cases error code when referral of
	single component principal fails
Message-ID: <C7886D58D1D4677127EB5E27 at sphinx.andrew.cmu.edu>
X-Mailer: Mulberry/4.0.7 (Linux/x86)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
X-Scanned-By: MIMEDefang 2.42
X-Scanned-By: MIMEDefang 2.57 on 128.2.10.212
X-Spam-Score: 2
X-Spam-Level: ** (2)
X-Spam-Flag: NO
X-Mailman-Approved-At: Mon, 12 Feb 2007 16:54:53 -0500
X-BeenThere: krb5-bugs-incoming at mailman.mit.edu
X-Mailman-Version: 2.1.6
Precedence: list
Sender: krb5-bugs-incoming-bounces at PCH.mit.edu
Errors-To: krb5-bugs-incoming-bounces at PCH.mit.edu

>Submitter-Id:	net
>Originator:	Chaskiel Grundman <cg2v at andrew.cmu.edu>
>Organization:
	Carnegie Mellon University
>Confidential:	no
>Synopsis:	krb5_get_credentials special-cases error code when referral of 
single component principal fails
>Severity:	non-critical
>Priority:	low
>Category:	krb5-libs
>Class:		sw-bug
>Release:	1.6

>Description:
when a client application asks for a referral (by which I mean that the 
realm is "") for a single-component principal, and the kdc returns an 
error, krb5_get_cred_from_kdc_opt returns KRB5_ERR_HOST_REALM_UNKNOWN 
instead of the error the kdc returned (which is likely to be 
KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN).

>How-To-Repeat:
Compare output of
kvno xyzzyasdf@
with
kvno xyzzy/asdf@