* do_as_req.c (process_as_req): Reset master key after closing and

 	 	reopening DB when KDC_UPDATES_KDB compiled
 	 	in. [krb5-kdc/495 by Tony Mione]

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@10276 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/kdc/ChangeLog b/src/kdc/ChangeLog
index c9888f4886c2c3d8fc09fc95cc3bdcedbab66666..c7f025430d51ec97d76e8b311f0077de67522ada 100644 (file)
--- a/src/kdc/ChangeLog
+++ b/src/kdc/ChangeLog
@@ -1,3 +1,9 @@
+Wed Nov 12 14:47:46 1997  Ezra Peisach  <epeisach@mit.edu>
+
+       * do_as_req.c (process_as_req): Reset master key after closing and
+               reopening DB when KDC_UPDATES_KDB compiled
+               in. [krb5-kdc/495 by Tony Mione]
+
 Mon Nov 10 20:03:14 1997  Theodore Y. Ts'o  <tytso@mit.edu>
 
        * kdc_util.c (kdc_process_tgs_req): If not using the reply cache,

diff --git a/src/kdc/do_as_req.c b/src/kdc/do_as_req.c
index e571680272012320e03c695a53ef42d391318f88..22d5b1b563e4b74599eb8ad0fe0563793c4fb263 100644 (file)
--- a/src/kdc/do_as_req.c
+++ b/src/kdc/do_as_req.c
@@ -457,6 +457,8 @@ errout:
                krb5_db_set_name(kdc_active_realm->realm_context,
                                 kdc_active_realm->realm_dbname);
            krb5_db_init(kdc_context);
+           /* Reset master key */
+           krb5_db_set_mkey(kdc_context, &kdc_active_realm->realm_encblock);
        }
 #endif /* KRBCONF_KDC_MODIFIES_KDB */
        krb5_db_free_principal(kdc_context, &client, c_nprincs);