svn rev #22143: branches/fast/src/lib/krb5/krb/

[hartmans@MIT.EDU]

http://src.mit.edu/fisheye/changelog/krb5/?cs=22143
Commit By: hartmans
Log Message:
FAST response only when FAST in use

Client should expect a FAST response only when fast is being ussed.
krb5int_fast_process_response now returns success if FAST is not in use.


Changed Files:
U   branches/fast/src/lib/krb5/krb/fast.c
Modified: branches/fast/src/lib/krb5/krb/fast.c
===================================================================
--- branches/fast/src/lib/krb5/krb/fast.c	2009-03-26 05:37:31 UTC (rev 22142)
+++ branches/fast/src/lib/krb5/krb/fast.c	2009-03-26 05:37:34 UTC (rev 22143)
@@ -257,8 +257,7 @@
     krb5_pa_data *fx_reply = NULL;
     krb5_fast_response *local_resp = NULL;
     assert(state != NULL);
-    if (state->armor_key == NULL)
-	return 0;
+    assert(state->armor_key);
         fx_reply = krb5int_find_pa_data(context, in_padata, KRB5_PADATA_FX_FAST);
     if (fx_reply == NULL)
 	retval = KRB5_ERR_FAST_REQUIRED;
@@ -417,6 +416,8 @@
     krb5_boolean cksum_valid;
     krb5_clear_error_message(context);
     *as_key = NULL;
+    if (state->armor_key == 0)
+	return 0;
         retval = decrypt_fast_reply(context, state, resp->padata,
 				&fast_response);
     if (retval == 0) {