[krbdev.mit.edu #4639] SVN Commit

Jeffrey Altman via RT rt-comment at krbdev.mit.edu
Mon Nov 6 16:55:19 EST 2006


 	krb5_get_init_creds_password() previously did not consistently
	handle KRB5KDC_ERR_KEY_EXP errors.  If there is a "master_kdc" 
 	entry for the realm and the KDC is reachable, then the function 
	will prompt the user for a password change.  Otherwise, it will
	return the error code to the caller.  If the caller is a ticket 
	manager, it will prompt the user for a password change with a
	dialog that is different from the one generated by the prompter
	function passed to krb5_get_init_creds_password.

	With this change krb5_get_init_creds_password() will always 
	prompt the user if it would return KRB5KDC_ERR_KEY_EXP unless
	the function is compiled with USE_LOGIN_LIBRARY.  (KFM)


Commit By: jaltman



Revision: 18764
Changed Files:
U   trunk/src/lib/krb5/krb/gic_pwd.c




More information about the krb5-bugs mailing list