From a511d37d83be3bf47440527ad2b54fd124ba97a5 Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Fri, 4 Mar 2011 14:33:02 +0100 Subject: HEIMDAL:kdc: correctly propagate HDB_ERR_NOT_FOUND_HERE to via tgs_parse_request() and _kdc_tgs_rep() metze --- source4/heimdal/kdc/krb5tgs.c | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'source4/heimdal') diff --git a/source4/heimdal/kdc/krb5tgs.c b/source4/heimdal/kdc/krb5tgs.c index 4af4c29ceb..037934f2a6 100644 --- a/source4/heimdal/kdc/krb5tgs.c +++ b/source4/heimdal/kdc/krb5tgs.c @@ -1179,6 +1179,7 @@ tgs_parse_request(krb5_context context, kdc_log(context, config, 5, "Ticket-granting ticket account %s does not have secrets at this KDC, need to proxy", p); if (ret == 0) free(p); + ret = HDB_ERR_NOT_FOUND_HERE; goto out; } else if(ret){ const char *msg = krb5_get_error_message(context, ret); @@ -2239,6 +2240,10 @@ _kdc_tgs_rep(krb5_context context, &auth_data, &replykey, &rk_is_subkey); + if (ret == HDB_ERR_NOT_FOUND_HERE) { + /* kdc_log() is called in tgs_parse_request() */ + goto out; + } if (ret) { kdc_log(context, config, 0, "Failed parsing TGS-REQ from %s", from); -- cgit