[krbdev.mit.edu #6428] KDC prefers returning KDC_ERR_KEY_EXP vs. KDC_ERR_NAME_EXP

pgp@psu.edu via RT rt-comment at krbdev.mit.edu
Wed Jun 24 14:02:11 EDT 2009


On 6/24/09 1:45 PM, Tom Yu via RT wrote:
> Thanks for the information, and sorry for the delay.  Is it correct to
> assume that your excerpts are from src/kdc/kdc_util.c?

Correct.

> It's not completely clear why the KDC validation proceeds in the order
> it currently does.  I will ask around to confirm that there is no good
> reason for the existing ordering.

OK. Thanks!  -Phil




More information about the krb5-bugs mailing list