convert server.key into a real key
(it may be encrypted in the database)
*/
- if (retval = KDB_CONVERT_KEY_OUTOF_DB(context,&server_entry.key,&tgs_key)) {
+ if (retval = krb5_kdb_decrypt_key(context,&master_encblock,
+ &server_entry.key,&tgs_key)) {
krb5_db_free_principal(context, &server_entry, number_of_entries);
(void) krb5_finish_key(context, &master_encblock);
memset((char *)&master_encblock, 0, sizeof(master_encblock));
enckey = &(client->key);
/* Extract client key/alt_key from master key */
- retval = KDB_CONVERT_KEY_OUTOF_DB(kdc_context,enckey,&tmpkey);
+ retval = krb5_kdb_decrypt_key(kdc_context,&master_encblock,enckey,&tmpkey);
if (retval) {
krb5_klog_syslog( LOG_ERR, "AS_REQ: Unable to extract client key: %s",
error_message(retval));
*/
enckey = &(client->alt_key);
/* Extract client key/alt_key from master key */
- if ((retval = KDB_CONVERT_KEY_OUTOF_DB(kdc_context,enckey,&tmpkey))) {
+ if ((retval = krb5_kdb_decrypt_key(kdc_context,&master_encblock,
+ enckey,&tmpkey))) {
krb5_klog_syslog( LOG_ERR, "AS_REQ: Unable to extract client alt_key: %s",
error_message(retval));
return retval;
/* convert server.key into a real key (it may be encrypted
in the database) */
- if ((retval = KDB_CONVERT_KEY_OUTOF_DB(kdc_context, &server.key, &encrypting_key)))
+ if ((retval = krb5_kdb_decrypt_key(kdc_context, &master_encblock,
+ &server.key, &encrypting_key)))
goto errout;
retval = krb5_encrypt_tkt_part(kdc_context, &eblock, &encrypting_key, &ticket_reply);
memset((char *)encrypting_key.contents, 0, encrypting_key.length);
/* convert client.key into a real key (it may be encrypted
in the database) */
- if ((retval = KDB_CONVERT_KEY_OUTOF_DB(kdc_context, &client.key, &encrypting_key)))
+ if ((retval = krb5_kdb_decrypt_key(kdc_context, &master_encblock,
+ &client.key, &encrypting_key)))
goto errout;
reply.enc_part.etype = useetype;
reply.enc_part.kvno = client.kvno;
* convert server.key into a real key (it is encrypted in the
* database)
*/
- ret = KDB_CONVERT_KEY_OUTOF_DB(context, &server.key, key);
+ ret = krb5_kdb_decrypt_key(context, &master_encblock, &server.key, key);
if (kvno)
*kvno = server.kvno;
krb5_db_free_principal(context, &server, nprincs);