[600] in Kerberos
bug in kerberos.c
daemon@TELECOM.MIT.EDU (Kevin Fall)
Fri Jan 20 20:15:53 1989
From: kfall@OKEEFFE.BERKELEY.EDU (Kevin Fall)
To: steiner@ATHENA.MIT.EDU
Cc: kerberos@ATHENA.MIT.EDU
In kerberos.c near line 400 there is a code segment
as follows:
if(set_tgtkey(tktrlm)) {
lt = klog(L_ERR_UNK,
"FAILED realm %s unknown. Host: %s ",
tktrlm, inet_ntoa(client_host));
kerb_err_reply(client, pkt, kerno, lt);
return;
}
However, kerno has not been set and is typically zero.
This makes things rather tricky when you are trying to
figure out why inter-realm authentication isn't working!
The most appropriate error code is probably KERB_ERR_PRINCIPAL_UNKNOWN,
but a new code (KERB_ERR_REALM_UNKNOWN?) would probably be better.
- Kevin
