need to do confounder stuff in kdc reply too

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@921 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/kdc/do_as_req.c b/src/kdc/do_as_req.c
index 91a2a89d8d1b7db2863308197e527ff5f7b2800e..3653521f91cafb2c720604310b4f94bb09c6b2e1 100644 (file)
--- a/src/kdc/do_as_req.c
+++ b/src/kdc/do_as_req.c
@@ -274,6 +274,8 @@ krb5_data **response;                       /* filled in with a response packet */
 
     reply_encpart.caddrs = enc_tkt_reply.caddrs;
 
+    reply_encpart.confounder = krb5_random_confounder();
+
     /* now encode/encrypt the response */
 
     /* convert client.key into a real key (it may be encrypted

diff --git a/src/kdc/do_tgs_req.c b/src/kdc/do_tgs_req.c
index 9ea76d8014696634cef4836f647d1ef8356b245e..cea26ed2a7010e3cd1bf50b4372bcc8ae524ded0 100644 (file)
--- a/src/kdc/do_tgs_req.c
+++ b/src/kdc/do_tgs_req.c
@@ -439,6 +439,7 @@ krb5_data **response;                       /* filled in with a response packet */
     reply_encpart.key_exp = 0;         /* ditto */
     reply_encpart.flags = enc_tkt_reply.flags;
     reply_encpart.server = ticket_reply.server;
+    reply_encpart.confounder = krb5_random_confounder();
 
     retval = krb5_encode_kdc_rep(KRB5_TGS_REP, &reply_encpart,
                                 header_ticket->enc_part2->session,