]> git.ipfire.org Git - thirdparty/krb5.git/commit
Avoid setting AS key when OTP preauth fails
authorNathaniel McCallum <npmccallum@redhat.com>
Thu, 26 May 2016 20:54:29 +0000 (16:54 -0400)
committerTom Yu <tlyu@mit.edu>
Wed, 6 Jul 2016 19:17:06 +0000 (15:17 -0400)
commitc82185d4b62cb943d47f90d93f4e51d0dd184d18
treedb37409d34f7f51c1f9685cb237958224a34d67b
parent3132229302a7526b94e8b272086623e981a93249
Avoid setting AS key when OTP preauth fails

In otp_client_process(), call cb->set_as_key() later in the function
after the OTP request has been created.  The previous position of this
call caused the AS key to be replaced even when later code in the
function failed, preventing other preauth mechanisms from retrieving
the correct AS key.

(cherry picked from commit 0712d0059d72ddeaf1764f8fa173a321e3bc072d)

ticket: 8421
version_fixed: 1.13.6
tags: -pullup
status: resolved
src/lib/krb5/krb/preauth_otp.c