diff options
| author | Russ Allbery <rra@stanford.edu> | 2007-12-30 06:39:22 +0000 |
|---|---|---|
| committer | Russ Allbery <rra@stanford.edu> | 2007-12-30 06:39:22 +0000 |
| commit | e4655054fc18b9814d05e155554c62e856f34c68 (patch) | |
| tree | 33c7a786623e7a0ece1c86627ec8f9acd1b859c7 /src/clients/ksu | |
| parent | 8787ba66c68dd2388b712ada600f2689c13c401c (diff) | |
| download | krb5-e4655054fc18b9814d05e155554c62e856f34c68.tar.gz krb5-e4655054fc18b9814d05e155554c62e856f34c68.tar.xz krb5-e4655054fc18b9814d05e155554c62e856f34c68.zip | |
improve debugging of ticket verification in ksu
When ksu is built with debugging support and -D is used, print out the
principals being compared before doing the verification rather than
afterwards so that the principals will be printed when the verification
fails.
ticket: new
Component: krb5-appl
Version_Reported: 1.6.2
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20196 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/clients/ksu')
| -rw-r--r-- | src/clients/ksu/krb_auth_su.c | 10 |
1 files changed, 5 insertions, 5 deletions
diff --git a/src/clients/ksu/krb_auth_su.c b/src/clients/ksu/krb_auth_su.c index 6c3c94debc..f19c169249 100644 --- a/src/clients/ksu/krb_auth_su.c +++ b/src/clients/ksu/krb_auth_su.c @@ -300,16 +300,16 @@ krb5_verify_tkt_def(context, client, server, cred_ses_key, return retval; } - if (server && !krb5_principal_compare(context, server, tkt->server)){ - return KRB5KRB_AP_WRONG_PRINC; - } - if (auth_debug){ - fprintf(stderr,"krb5_verify_tkt_def: verified target server\n"); + fprintf(stderr,"krb5_verify_tkt_def: verifying target server\n"); dump_principal(context, "server", server); dump_principal(context, "tkt->server", tkt->server); } + if (server && !krb5_principal_compare(context, server, tkt->server)){ + return KRB5KRB_AP_WRONG_PRINC; + } + /* get the default keytab */ if ((retval = krb5_kt_default(context, &keytabid))){ krb5_free_ticket(context, tkt); |