From 1756bcd1b105683567f88261a19cf8ae659e8c41 Mon Sep 17 00:00:00 2001 From: Sam Hartman Date: Wed, 14 May 2003 19:28:48 +0000 Subject: [PATCH] Allow the KDC to return bad integrity errors to the client on preauth failure. This will be translated by the client into password incorrect. Ticket: 1488 Target_Version: 1.3 Tags: pullup Component: krb5-kdc git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@15439 dc483132-0cff-0310-8789-dd5450dbe970 --- src/kdc/ChangeLog | 4 ++++ src/kdc/kdc_preauth.c | 1 + 2 files changed, 5 insertions(+) diff --git a/src/kdc/ChangeLog b/src/kdc/ChangeLog index 64fbb4844..e4cbd7330 100644 --- a/src/kdc/ChangeLog +++ b/src/kdc/ChangeLog @@ -1,3 +1,7 @@ +2003-05-14 Sam Hartman + + * kdc_preauth.c (check_padata): Allow bad_integrity to be returned to a client + 2003-05-08 Sam Hartman * kdc_preauth.c (return_pw_salt): Don't return pw-salt if the diff --git a/src/kdc/kdc_preauth.c b/src/kdc/kdc_preauth.c index 31e6f4705..963a25b7b 100644 --- a/src/kdc/kdc_preauth.c +++ b/src/kdc/kdc_preauth.c @@ -384,6 +384,7 @@ check_padata (krb5_context context, krb5_db_entry *client, * to return some preauth system errors back to the client. */ switch(retval) { + case KRB5KRB_AP_ERR_BAD_INTEGRITY: case KRB5KRB_AP_ERR_SKEW: return retval; default: -- 2.26.2