pull up r25469 from trunk
authorTom Yu <tlyu@mit.edu>
Fri, 2 Dec 2011 21:20:13 +0000 (21:20 +0000)
committerTom Yu <tlyu@mit.edu>
Fri, 2 Dec 2011 21:20:13 +0000 (21:20 +0000)
commitbf51deae1e58caab352d3bb2882c7eb4ed6dbc88
tree48ea322b11c380b3e483e68ff8277526d9fe458d
parent606058b1fda291fedfb525520c1817e9f6ca9956
pull up r25469 from trunk

 ------------------------------------------------------------------------
 r25469 | ghudson | 2011-11-11 12:01:12 -0500 (Fri, 11 Nov 2011) | 14 lines

 ticket: 6430
 subject: Avoid looping when preauth can't be generated
 target_version: 1.10
 tags: pullup

 If we receive a PREAUTH_REQUIRED error and fail to generate any real
 preauthentication, error out immediately instead of continuing to
 generate non-preauthenticated requests until we hit the loop count.

 There is a lot of room to generate a more meaningful error about why
 we failed to generate preauth (although in many cases the answer may
 be too complicated to explain in an error message), but that requires
 more radical restructuring of the preauth framework.

ticket: 6430
version_fixed: 1.10
status: resolved

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-10@25501 dc483132-0cff-0310-8789-dd5450dbe970
src/include/k5-int.h
src/lib/krb5/krb/get_in_tkt.c
src/lib/krb5/krb/init_creds_ctx.h
src/lib/krb5/krb/preauth2.c