* do_as_req.c (process_as_req): Fix to assign kvno to

	reply.enc_part after encryption, since krb5_c_encrypt() now
	explicitly initializes all fields of a krb5_enc_data.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11175 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/kdc/ChangeLog b/src/kdc/ChangeLog
index d593227df0711a972956684fb4564ff016d99a0f..398b55e471bc72aa4bef4385d78f34d3361f94c9 100644 (file)
--- a/src/kdc/ChangeLog
+++ b/src/kdc/ChangeLog
@@ -1,3 +1,9 @@
+Wed Feb 17 17:07:43 1999  Tom Yu  <tlyu@mit.edu>
+
+       * do_as_req.c (process_as_req): Fix to assign kvno to
+       reply.enc_part after encryption, since krb5_c_encrypt() now
+       explicitly initializes all fields of a krb5_enc_data.
+
 1998-12-17  Theodore Ts'o  <tytso@rsts-11.mit.edu>
 
        * kdc_preauth.c (check_padata): If preauth fails because the

diff --git a/src/kdc/do_as_req.c b/src/kdc/do_as_req.c
index b6fa39d3dfe556a06b4c290f4de38b171fed6194..34eeb66c156f2e7ca57483acf0b37dbbe8f59924 100644 (file)
--- a/src/kdc/do_as_req.c
+++ b/src/kdc/do_as_req.c
@@ -379,7 +379,6 @@ krb5_data **response;                       /* filled in with a response packet */
     reply_encpart.times.authtime = authtime = kdc_time;
 
     reply_encpart.caddrs = enc_tkt_reply.caddrs;
-    reply.enc_part.kvno = client_key->key_data_kvno;
 
     /* Fetch the padata info to be returned */
     errcode = return_padata(kdc_context, &client, request, &reply, client_key,
@@ -397,6 +396,7 @@ krb5_data **response;                       /* filled in with a response packet */
                                  0, &encrypting_key,  &reply, response);
     krb5_free_keyblock_contents(kdc_context, &encrypting_key);
     encrypting_key.contents = 0;
+    reply.enc_part.kvno = client_key->key_data_kvno;
 
     if (errcode) {
        status = "ENCODE_KDC_REP";