lib/krb5: Do not re-send the AS-REQ if fast was disabled
commitde4fbc95145737ad71e115e47dcb635fcd71bdab
authorAndrew Bartlett <abartlet@samba.org>
Wed, 19 Sep 2018 02:08:10 +0000 (18 19:08 -0700)
committerNico Williams <nico@cryptonector.com>
Fri, 14 Dec 2018 22:38:43 +0000 (14 16:38 -0600)
tree7f10b4534f09543373ad56eece38b57151e1e62d
parent4279b467cbef7cfe718de8f49797999a108777b4
lib/krb5: Do not re-send the AS-REQ if fast was disabled

Without this, in an AS-REQ that has no local key for FAST
we would send the AS-REQ again, which can bump the bad
password count on the KDC twice.

So only try again if FAST was actually tried.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>
lib/krb5/init_creds_pw.c