Don't return KRB5_KDB_NO_PERMITTED_KEY from

krb5_dbe_def_search_enctype if we previously returned results (i.e. if
*start > 0).

ticket: 6622
target_version: 1.8
tags: pullup

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23597 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/lib/kdb/kdb_default.c b/src/lib/kdb/kdb_default.c
index ea24d36fd6ea6cf39e6bd1a533227457ad826ac8..0aca60310e9bde737e43bcfe5dd56aeaeca22b7c 100644 (file)
--- a/src/lib/kdb/kdb_default.c
+++ b/src/lib/kdb/kdb_default.c
@@ -93,7 +93,8 @@ krb5_dbe_def_search_enctype(kcontext, dbentp, start, ktype, stype, kvno, kdatap)
          */
         if (!krb5_is_permitted_enctype(kcontext,
                                        dbentp->key_data[i].key_data_type[0])) {
-            ret = KRB5_KDB_NO_PERMITTED_KEY;
+            if (*start == 0)
+                ret = KRB5_KDB_NO_PERMITTED_KEY;
             continue;
         }