svn rev #22182: trunk/src/lib/krb5/krb/
ghudson@MIT.EDU
ghudson at MIT.EDU
Wed Apr 8 11:22:17 EDT 2009
http://src.mit.edu/fisheye/changelog/krb5/?cs=22182
Commit By: ghudson
Log Message:
ticket: 6108
tags: pullup
target_version: 1.7
When getting initial credentials with a password, try the master if
preauth fails on a slave, since preauth can fail due to an out-of-date
key. This removes a snippet added in r14939 which was considering
only hardware preauth.
Changed Files:
U trunk/src/lib/krb5/krb/gic_pwd.c
Modified: trunk/src/lib/krb5/krb/gic_pwd.c
===================================================================
--- trunk/src/lib/krb5/krb/gic_pwd.c 2009-04-08 01:23:03 UTC (rev 22181)
+++ trunk/src/lib/krb5/krb/gic_pwd.c 2009-04-08 15:22:17 UTC (rev 22182)
@@ -144,10 +144,9 @@
goto cleanup;
/* If all the kdc's are unavailable, or if the error was due to a
- user interrupt, or preauth errored out, fail */
+ user interrupt, fail */
if ((ret == KRB5_KDC_UNREACH) ||
- (ret == KRB5_PREAUTH_FAILED) ||
(ret == KRB5_LIBOS_PWDINTR) ||
(ret == KRB5_REALM_CANT_RESOLVE))
goto cleanup;
More information about the cvs-krb5
mailing list