krb5_get_init_creds_password does not consistently prompt for password changing
authorJeffrey Altman <jaltman@secure-endpoints.com>
Mon, 6 Nov 2006 21:55:13 +0000 (21:55 +0000)
committerJeffrey Altman <jaltman@secure-endpoints.com>
Mon, 6 Nov 2006 21:55:13 +0000 (21:55 +0000)
commitd73e09e9a7e2804fe43dcd7ae82f4ce30088809b
tree8a4e80a35e80bc8b2c38610467cf0fc29e9ccddc
parent61b3398c03e8b7dedfd2c101dcb764913c8e9309
krb5_get_init_creds_password does not consistently prompt for password changing

  krb5_get_init_creds_password() previously did not consistently
handle KRB5KDC_ERR_KEY_EXP errors.  If there is a "master_kdc"
  entry for the realm and the KDC is reachable, then the function
will prompt the user for a password change.  Otherwise, it will
return the error code to the caller.  If the caller is a ticket
manager, it will prompt the user for a password change with a
dialog that is different from the one generated by the prompter
function passed to krb5_get_init_creds_password.

With this change krb5_get_init_creds_password() will always
prompt the user if it would return KRB5KDC_ERR_KEY_EXP unless
the function is compiled with USE_LOGIN_LIBRARY.  (KFM)

ticket: new
tags: pullup

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@18764 dc483132-0cff-0310-8789-dd5450dbe970
src/lib/krb5/krb/gic_pwd.c