krb5 commit: Set fCachesTicket=TRUE when no credentials

Benjamin Kaduk kaduk at MIT.EDU
Fri Aug 24 12:24:15 EDT 2012


https://github.com/krb5/krb5/commit/c654e9c7436cdd57cb61c0bd29b26c79e3675a01
commit c654e9c7436cdd57cb61c0bd29b26c79e3675a01
Author: Kevin Wasserman <kevin.wasserman at painless-security.com>
Date:   Mon Jul 16 11:48:55 2012 -0400

    Set fCachesTicket=TRUE when no credentials
    
    It is not really clear this is correct, but neither was the
    previous behavior.
    
    Signed-off-by: Kevin Wasserman <kevin.wasserman at painless-security.com>
    
    ticket: 7255 (new)
    queue: kfw
    target_version: 1.10.4
    tags: pullup

 src/lib/krb5/ccache/cc_mslsa.c |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)

diff --git a/src/lib/krb5/ccache/cc_mslsa.c b/src/lib/krb5/ccache/cc_mslsa.c
index f25658e..39d78e7 100644
--- a/src/lib/krb5/ccache/cc_mslsa.c
+++ b/src/lib/krb5/ccache/cc_mslsa.c
@@ -655,7 +655,8 @@ does_retrieve_ticket_cache_ticket (void)
         LsaDeregisterLogonProcess(LogonHandle);
 
         if (FAILED(Status) || FAILED(SubStatus)) {
-            if ( SubStatus == STATUS_NOT_SUPPORTED )
+            if (SubStatus == STATUS_NOT_SUPPORTED ||
+                SubStatus == SEC_E_NO_CREDENTIALS)
                 /* The combination of the two CacheOption flags
                  * is not supported; therefore, the new flag is supported
                  */


More information about the cvs-krb5 mailing list