]> git.ipfire.org Git - thirdparty/krb5.git/commit
Improve bad password inference in kinit 491/head
authorGreg Hudson <ghudson@mit.edu>
Mon, 25 Jul 2016 17:28:43 +0000 (13:28 -0400)
committerGreg Hudson <ghudson@mit.edu>
Mon, 25 Jul 2016 22:41:51 +0000 (18:41 -0400)
commit1a83ffad4d8e405ce696536c06d9bce1f8100595
tree5fc5ae59c0ca12f9563f401c945825e29862a23b
parent7d497a56279dcb59b6be9f8994257e76788d2e89
Improve bad password inference in kinit

kinit currently outputs "Password incorrect" if it sees a
bad-integrity error code, which results if the KDC reply couldn't be
decrypted, or when encrypted timestamp preauth fails against an MIT
krb5 1.14 or earlier KDC.  Expand this check to include general
preauth failures reported by the KDC, but only if a password was
prompted for.

ticket: 8465 (new)
src/clients/kinit/kinit.c