summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorSam Hartman <hartmans@mit.edu>2003-05-14 19:28:48 +0000
committerSam Hartman <hartmans@mit.edu>2003-05-14 19:28:48 +0000
commit1756bcd1b105683567f88261a19cf8ae659e8c41 (patch)
tree280f6d922186c1c576b0be4586f59fa7a94d0f86
parentfdebdb4383715d875f3659498f2671f964b1c149 (diff)
downloadkrb5-1756bcd1b105683567f88261a19cf8ae659e8c41.tar.gz
krb5-1756bcd1b105683567f88261a19cf8ae659e8c41.tar.xz
krb5-1756bcd1b105683567f88261a19cf8ae659e8c41.zip
Allow the KDC to return bad integrity errors to the client on preauth
failure. This will be translated by the client into password incorrect. Ticket: 1488 Target_Version: 1.3 Tags: pullup Component: krb5-kdc git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15439 dc483132-0cff-0310-8789-dd5450dbe970
-rw-r--r--src/kdc/ChangeLog4
-rw-r--r--src/kdc/kdc_preauth.c1
2 files changed, 5 insertions, 0 deletions
diff --git a/src/kdc/ChangeLog b/src/kdc/ChangeLog
index 64fbb48441..e4cbd73306 100644
--- a/src/kdc/ChangeLog
+++ b/src/kdc/ChangeLog
@@ -1,3 +1,7 @@
+2003-05-14 Sam Hartman <hartmans@mit.edu>
+
+ * kdc_preauth.c (check_padata): Allow bad_integrity to be returned to a client
+
2003-05-08 Sam Hartman <hartmans@mit.edu>
* kdc_preauth.c (return_pw_salt): Don't return pw-salt if the
diff --git a/src/kdc/kdc_preauth.c b/src/kdc/kdc_preauth.c
index 31e6f47057..963a25b7b2 100644
--- a/src/kdc/kdc_preauth.c
+++ b/src/kdc/kdc_preauth.c
@@ -384,6 +384,7 @@ check_padata (krb5_context context, krb5_db_entry *client,
* to return some preauth system errors back to the client.
*/
switch(retval) {
+ case KRB5KRB_AP_ERR_BAD_INTEGRITY:
case KRB5KRB_AP_ERR_SKEW:
return retval;
default: