svn rev #22182: trunk/src/lib/krb5/krb/

ghudson@MIT.EDU ghudson at MIT.EDU
Wed Apr 8 11:22:17 EDT 2009


http://src.mit.edu/fisheye/changelog/krb5/?cs=22182
Commit By: ghudson
Log Message:
ticket: 6108
tags: pullup
target_version: 1.7

When getting initial credentials with a password, try the master if
preauth fails on a slave, since preauth can fail due to an out-of-date
key.  This removes a snippet added in r14939 which was considering
only hardware preauth.



Changed Files:
U   trunk/src/lib/krb5/krb/gic_pwd.c
Modified: trunk/src/lib/krb5/krb/gic_pwd.c
===================================================================
--- trunk/src/lib/krb5/krb/gic_pwd.c	2009-04-08 01:23:03 UTC (rev 22181)
+++ trunk/src/lib/krb5/krb/gic_pwd.c	2009-04-08 15:22:17 UTC (rev 22182)
@@ -144,10 +144,9 @@
       goto cleanup;
 
    /* If all the kdc's are unavailable, or if the error was due to a
-      user interrupt, or preauth errored out, fail */
+      user interrupt, fail */
 
    if ((ret == KRB5_KDC_UNREACH) ||
-       (ret == KRB5_PREAUTH_FAILED) ||
        (ret == KRB5_LIBOS_PWDINTR) ||
 	   (ret == KRB5_REALM_CANT_RESOLVE))
       goto cleanup;




More information about the cvs-krb5 mailing list