krb5_server_decrypt_ticket_keytab wrongly succeeds
authorTom Yu <tlyu@mit.edu>
Wed, 11 Jan 2012 04:18:59 +0000 (04:18 +0000)
committerTom Yu <tlyu@mit.edu>
Wed, 11 Jan 2012 04:18:59 +0000 (04:18 +0000)
commita5ef59e68989019a1635d16fd91e103239958283
tree02c364d793241280da4ea27e33153353a9f407cc
parent2d533e0b65957357a3462e93ec4a946d54b8c713
krb5_server_decrypt_ticket_keytab wrongly succeeds

Pull up r25584 from trunk

 ------------------------------------------------------------------------
 r25584 | ghudson | 2011-12-12 19:53:56 -0500 (Mon, 12 Dec 2011) | 9 lines

 ticket: 7051
 subject: krb5_server_decrypt_ticket_keytab wrongly succeeds

 If krb5_server_decrypt_ticket_keytab doesn't find a key of the
 appropriate enctype in an iterable keytab, it returns 0 (without
 decrypting the ticket) due to a misplaced initialization of retval.
 This bug causes kinit -k to claim "keytab entry valid" when it
 shouldn't.  Reported by mark@mproehl.net.

ticket: 7069
version_fixed: 1.9.3
status: resolved

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-9@25642 dc483132-0cff-0310-8789-dd5450dbe970
src/lib/krb5/krb/srv_dec_tkt.c