svn rev #23911: branches/iakerb/src/lib/gssapi/krb5/

ghudson@MIT.EDU ghudson at MIT.EDU
Tue Apr 20 04:02:40 EDT 2010


http://src.mit.edu/fisheye/changelog/krb5/?cs=23911
Commit By: ghudson
Log Message:
In the krb5 GSSAPI mech, adjust the error code expected from
krb5_get_credentials() when there is no TGT in the ccache, in light of
r23909.



Changed Files:
U   branches/iakerb/src/lib/gssapi/krb5/init_sec_context.c
Modified: branches/iakerb/src/lib/gssapi/krb5/init_sec_context.c
===================================================================
--- branches/iakerb/src/lib/gssapi/krb5/init_sec_context.c	2010-04-20 07:58:06 UTC (rev 23910)
+++ branches/iakerb/src/lib/gssapi/krb5/init_sec_context.c	2010-04-20 08:02:40 UTC (rev 23911)
@@ -201,11 +201,13 @@
 
     code = krb5_get_credentials(context, flags, cred->ccache,
                                 &in_creds, out_creds);
-    if (code == KRB5_NO_TKT_IN_RLM && cred->password.data != NULL) {
+    if (code == KRB5_CC_NOTFOUND && cred->password.data != NULL &&
+        !cred->iakerb_mech) {
         krb5_creds tgt_creds;
 
         memset(&tgt_creds, 0, sizeof(tgt_creds));
 
+        /* No TGT in the ccache, but we can get one with the password. */
         code = krb5_get_init_creds_password(context, &tgt_creds,
                                             in_creds.client,
                                             cred->password.data,




More information about the cvs-krb5 mailing list