]> git.ipfire.org Git - thirdparty/krb5.git/commit
Expose context errors in pkinit_server_plugin_init 708/head
authorRobbie Harwood <rharwood@redhat.com>
Mon, 13 Nov 2017 18:32:37 +0000 (13:32 -0500)
committerGreg Hudson <ghudson@mit.edu>
Tue, 21 Nov 2017 22:05:28 +0000 (17:05 -0500)
commit225aab3540c13c6289b22022d5e110f6fc26151d
treebfb83bed329452dbce4dbb072b2e8b6fe455665a
parentf949e990f930f48df1f108fe311c58ae3da18b24
Expose context errors in pkinit_server_plugin_init

Commit 3ff426b9048a8024e5c175256c63cd0ad0572320 attempted to display
an error when OCSP support was requested, but this error message was
suppressed in pkinit_server_plugin_init().  Add a trace log for each
realm initialization error, and pass through the realm initialization
error when the KDC serves only one realm.  Other error messages from
pkinit_init_kdc_profile(), such as missing pkinit_identity or
pkinit_anchors, are also now exposted.

[ghudson@mit.edu: clarified commit message]

ticket: 8621 (new)
target_version: 1.16
tags: pullup
src/plugins/preauth/pkinit/pkinit_srv.c
src/plugins/preauth/pkinit/pkinit_trace.h