krb5: return KRB5KRB_AP_ERR_INAPP_CKSUM if PAC checksum fails
commitd6a472e953545ec3858ca969c1a4191e4f27ba63
authorLuke Howard <lukeh@padl.com>
Fri, 17 Sep 2021 03:57:57 +0000 (17 13:57 +1000)
committerAndrew Bartlett <abartlet@samba.org>
Thu, 14 Oct 2021 18:59:31 +0000 (14 18:59 +0000)
tree0b980232d8eb35d607749d2c42b1f48a27c5c21c
parent2773379603a5a625c5d1c6e62f29c442942ff570
krb5: return KRB5KRB_AP_ERR_INAPP_CKSUM if PAC checksum fails

Return KRB5KRB_AP_ERR_INAPP_CKSUM instead of EINVAL when verifying a PAC, if
the checksum is absent or unkeyed.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=14642

[jsutton@samba.org Cherry-picked from Heimdal commit
c4b99b48c4b18f30d504b427bc1961d7a71f631e]

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
source4/heimdal/lib/krb5/pac.c