[krbdev.mit.edu #8537] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Thu Feb 2 15:38:41 EST 2017


Simplify k5_preauth_tryagain()

When retrying pre-authentication for an error, try only the module for
the selected preauth type, not all preauth types in the original
method data.  Pass the error and its padata to k5_preauth_tryagain()
explicitly, so that those fields of krb5_init_creds_context are only
referenced in get_in_tkt.c.  Handle a degenerate case in
init_creds_step_reply() to simplify the code in
init_creds_step_request().

https://github.com/krb5/krb5/commit/27628e5d9d5e6fcfa73276106edbd8149d134dc0
Author: Greg Hudson <ghudson at mit.edu>
Commit: 27628e5d9d5e6fcfa73276106edbd8149d134dc0
Branch: master
 src/include/k5-trace.h        |    7 +++-
 src/lib/krb5/krb/get_in_tkt.c |   20 ++++--------
 src/lib/krb5/krb/int-proto.h  |    3 +-
 src/lib/krb5/krb/preauth2.c   |   64 +++++++++++++++++++++-------------------
 4 files changed, 48 insertions(+), 46 deletions(-)



More information about the krb5-bugs mailing list