[26877] in CVS-changelog-for-Kerberos-V5

home help back first fref pref prev next nref lref last post

krb5 commit: Set fCachesTicket=TRUE when no credentials

daemon@ATHENA.MIT.EDU (Benjamin Kaduk)
Fri Aug 24 12:24:48 2012

Date: Fri, 24 Aug 2012 12:24:15 -0400
From: Benjamin Kaduk <kaduk@mit.edu>
Message-Id: <201208241624.q7OGOFGA000546@drugstore.mit.edu>
To: cvs-krb5@mit.edu
Reply-To: krbdev@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cvs-krb5-bounces@mit.edu

https://github.com/krb5/krb5/commit/c654e9c7436cdd57cb61c0bd29b26c79e3675a01
commit c654e9c7436cdd57cb61c0bd29b26c79e3675a01
Author: Kevin Wasserman <kevin.wasserman@painless-security.com>
Date:   Mon Jul 16 11:48:55 2012 -0400

    Set fCachesTicket=TRUE when no credentials
    
    It is not really clear this is correct, but neither was the
    previous behavior.
    
    Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com>
    
    ticket: 7255 (new)
    queue: kfw
    target_version: 1.10.4
    tags: pullup

 src/lib/krb5/ccache/cc_mslsa.c |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)

diff --git a/src/lib/krb5/ccache/cc_mslsa.c b/src/lib/krb5/ccache/cc_mslsa.c
index f25658e..39d78e7 100644
--- a/src/lib/krb5/ccache/cc_mslsa.c
+++ b/src/lib/krb5/ccache/cc_mslsa.c
@@ -655,7 +655,8 @@ does_retrieve_ticket_cache_ticket (void)
         LsaDeregisterLogonProcess(LogonHandle);
 
         if (FAILED(Status) || FAILED(SubStatus)) {
-            if ( SubStatus == STATUS_NOT_SUPPORTED )
+            if (SubStatus == STATUS_NOT_SUPPORTED ||
+                SubStatus == SEC_E_NO_CREDENTIALS)
                 /* The combination of the two CacheOption flags
                  * is not supported; therefore, the new flag is supported
                  */
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5

home help back first fref pref prev next nref lref last post