From a02402bb191fd71775e4cea7a04520699297d4b9 Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Fri, 4 Mar 2011 13:33:02 +0100 Subject: [PATCH] HEIMDAL:kdc: correctly propagate HDB_ERR_NOT_FOUND_HERE to via tgs_parse_request() and _kdc_tgs_rep() metze Signed-off-by: Love Hornquist Astrand --- kdc/krb5tgs.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/kdc/krb5tgs.c b/kdc/krb5tgs.c index 26e3936fe..3db77cde6 100644 --- a/kdc/krb5tgs.c +++ b/kdc/krb5tgs.c @@ -1179,6 +1179,7 @@ tgs_parse_request(krb5_context context, kdc_log(context, config, 5, "Ticket-granting ticket account %s does not have secrets at this KDC, need to proxy", p); if (ret == 0) free(p); + ret = HDB_ERR_NOT_FOUND_HERE; goto out; } else if(ret){ const char *msg = krb5_get_error_message(context, ret); @@ -2239,6 +2240,10 @@ _kdc_tgs_rep(krb5_context context, &auth_data, &replykey, &rk_is_subkey); + if (ret == HDB_ERR_NOT_FOUND_HERE) { + /* kdc_log() is called in tgs_parse_request() */ + goto out; + } if (ret) { kdc_log(context, config, 0, "Failed parsing TGS-REQ from %s", from); -- 2.11.4.GIT