[krbdev.mit.edu #6428] KDC prefers returning KDC_ERR_KEY_EXP vs. KDC_ERR_NAME_EXP

Tom Yu via RT rt-comment at krbdev.mit.edu
Wed Jun 24 13:45:28 EDT 2009


"pgp at psu.edu via RT" <rt-comment at krbdev.mit.edu> writes:

> Not a diff, but here are the two locations in 1.7 where the two |if| 
> statements need switched around:

Thanks for the information, and sorry for the delay.  Is it correct to
assume that your excerpts are from src/kdc/kdc_util.c?

It's not completely clear why the KDC validation proceeds in the order
it currently does.  I will ask around to confirm that there is no good
reason for the existing ordering.




More information about the krb5-bugs mailing list