cc_ccache_store_credentials should return ccErrBadCredentialsVersion

cc_ccache_store_credentials should return ccErrBadCredentialsVersion when
the principal for that version is not set on the ccache.

ticket: new

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20114 dc483132-0cff-0310-8789-dd5450dbe970

1 files changed, 6 insertions, 0 deletions

diff --git a/src/ccapi/server/ccs_credentials.c b/src/ccapi/server/ccs_credentials.c
index f30479946..04c8e21b5 100644
--- a/src/ccapi/server/ccs_credentials.c
+++ b/src/ccapi/server/ccs_credentials.c
@@ -37,6 +37,7 @@ struct ccs_credentials_d ccs_credentials_initializer = { NULL, NULL };
 
 cc_int32 ccs_credentials_new (ccs_credentials_t      *out_credentials,
                               cci_stream_t            in_stream,
+                              cc_uint32               in_ccache_version,
                               ccs_credentials_list_t  io_credentials_list)
 {
     cc_int32 err = ccNoError;
@@ -58,6 +59,11 @@ cc_int32 ccs_credentials_new (ccs_credentials_t      *out_credentials,
         err = cci_cred_union_read (&credentials->cred_union, in_stream);
     }
     
+    if (!err && !(credentials->cred_union->version & in_ccache_version)) {
+        /* ccache does not have a principal set for this credentials version */
+        err = cci_check_error (ccErrBadCredentialsVersion);
+    }
+    
     if (!err) {
         err = ccs_server_new_identifier (&credentials->identifier);
     }