[krbdev.mit.edu #6428] KDC prefers returning KDC_ERR_KEY_EXP vs. KDC_ERR_NAME_EXP
Tom Yu via RT
rt-comment at krbdev.mit.edu
Wed Jun 24 13:45:28 EDT 2009
"pgp at psu.edu via RT" <rt-comment at krbdev.mit.edu> writes:
> Not a diff, but here are the two locations in 1.7 where the two |if|
> statements need switched around:
Thanks for the information, and sorry for the delay. Is it correct to
assume that your excerpts are from src/kdc/kdc_util.c?
It's not completely clear why the KDC validation proceeds in the order
it currently does. I will ask around to confirm that there is no good
reason for the existing ordering.
More information about the krb5-bugs
mailing list