diff options
| author | Jan Cholasta <jcholast@redhat.com> | 2014-11-10 17:40:35 +0000 |
|---|---|---|
| committer | Jan Cholasta <jcholast@redhat.com> | 2014-11-25 08:23:24 +0000 |
| commit | eed7fb63789fb6349927e93e4cbd7b21db1a4f12 (patch) | |
| tree | e3cfa0d85a2a379128502f3e3db8ef08fe6914e5 | |
| parent | 968e1bbcf8f226e1abaa90df7cf31ae3143ade03 (diff) | |
| download | freeipa-eed7fb63789fb6349927e93e4cbd7b21db1a4f12.tar.gz freeipa-eed7fb63789fb6349927e93e4cbd7b21db1a4f12.tar.xz freeipa-eed7fb63789fb6349927e93e4cbd7b21db1a4f12.zip | |
Fix Kerberos error handling in ipa-sam
https://fedorahosted.org/freeipa/ticket/4713
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
| -rw-r--r-- | daemons/ipa-sam/ipa_sam.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/daemons/ipa-sam/ipa_sam.c b/daemons/ipa-sam/ipa_sam.c index 3b69f9e82..e71129901 100644 --- a/daemons/ipa-sam/ipa_sam.c +++ b/daemons/ipa-sam/ipa_sam.c @@ -4233,7 +4233,7 @@ static int bind_callback(LDAP *ldap_struct, struct smbldap_state *ldap_state, vo krb5_free_principal(data.context, in_creds.server); krb5_free_principal(data.context, in_creds.client); - if (rc) { + if (rc != 0 && rc != KRB5KRB_AP_ERR_TKT_NYV && rc != KRB5KRB_AP_ERR_TKT_EXPIRED) { rc = bind_callback_obtain_creds(&data); if (rc) { bind_callback_cleanup(&data, rc); |