[krbdev.mit.edu #6573] Fix preauth looping in krb5_get_init_creds

Greg Hudson via RT rt-comment at krbdev.mit.edu
Wed Nov 4 11:34:20 EST 2009


Index: get_in_tkt.c
===================================================================
--- get_in_tkt.c	(revision 22396)
+++ get_in_tkt.c	(working copy)
@@ -1331,8 +1331,7 @@
 					   &out_padata, &retry);
 	  if (ret !=0)
 	    goto cleanup;
-	  if ((err_reply->error == KDC_ERR_PREAUTH_REQUIRED ||err_reply->error == KDC_ERR_PREAUTH_FAILED)
-&& retry) {
+	  if (err_reply->error == KDC_ERR_PREAUTH_REQUIRED && retry) {
 		/* reset the list of preauth types to try */
 		if (preauth_to_use) {
 		    krb5_free_pa_data(context, preauth_to_use);




More information about the krb5-bugs mailing list