Problem with V4 keys in krb5-1.2.5

Sam Hartman hartmans at MIT.EDU
Mon Jun 24 18:30:16 EDT 2002


Here's a patch for the problem I've just committed to our mainline.
If you happen to be packaging a KDC product we would really appreciate
you including this patch
.

? kdc/config.log
? kdc/config.status
? kdc/kdc5_err.h
? kdc/Makefile
? kdc/kdc5_err.c
? kdc/logger.c
? kdc/krb5kdc
? kdc/rtest
Index: kdc/ChangeLog
===================================================================
RCS file: /cvs/krbdev/krb5/src/kdc/ChangeLog,v
retrieving revision 5.213
diff -u -r5.213 ChangeLog
--- ChangeLog	2002/04/06 01:47:57	5.213
+++ ChangeLog	2002/06/24 22:28:01
@@ -1,3 +1,7 @@
+2002-06-24  Sam Hartman  <hartmans at mit.edu>
+
+	* kdc_preauth.c (get_etype_info): We get KRB5_KDB_NO_MATCHING_KEY not ENOENT; per 5.27 of kdb_xdr.c.
+
 2002-04-05  Ken Raeburn  <raeburn at mit.edu>
 
 	* do_as_req.c (process_as_req): Call krb5_c_valid_enctype instead
Index: kdc/kdc_preauth.c
===================================================================
RCS file: /cvs/krbdev/krb5/src/kdc/kdc_preauth.c,v
retrieving revision 5.30
diff -u -r5.30 kdc_preauth.c
--- kdc_preauth.c	2001/06/21 13:46:15	5.30
+++ kdc_preauth.c	2002/06/24 22:28:01
@@ -543,7 +543,7 @@
     while (1) {
 	retval = krb5_dbe_search_enctype(context, client, &start, -1,
 					 -1, 0, &client_key);
-	if (retval == ENOENT)
+	if (retval == KRB5_KDB_NO_MATCHING_KEY)
 	    break;
 	if (retval)
 	    goto cleanup;
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 258 bytes
Desc: not available
Url : http://mailman.mit.edu/pipermail/kerberos/attachments/20020624/1e0962e2/attachment.bin


More information about the Kerberos mailing list