krb5: return KRB5KRB_AP_ERR_INAPP_CKSUM if PAC checksum fails
commit49bcbcbb4d6130440064db6d1a0bd888891f3a8f
authorLuke Howard <lukeh@padl.com>
Fri, 17 Sep 2021 03:57:57 +0000 (17 13:57 +1000)
committerStefan Metzmacher <metze@samba.org>
Wed, 27 Oct 2021 22:37:10 +0000 (27 22:37 +0000)
treeac1e8745cab4e8c806474e72741de841a60697cb
parentc73825d0b0131b505ee2b75f75d55c21ad1f2d05
krb5: return KRB5KRB_AP_ERR_INAPP_CKSUM if PAC checksum fails

Return KRB5KRB_AP_ERR_INAPP_CKSUM instead of EINVAL when verifying a PAC, if
the checksum is absent or unkeyed.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14642
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14881

[jsutton@samba.org Cherry-picked from Heimdal commit
c4b99b48c4b18f30d504b427bc1961d7a71f631e]

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
(cherry picked from commit d6a472e953545ec3858ca969c1a4191e4f27ba63)
source4/heimdal/lib/krb5/pac.c