Change KRB5KDC_ERR_NO_ACCEPTABLE_KDF to 100

draft-ietf-krb-wg-pkinit-alg-agility-07 specifies
KDC_ERR_NO_ACCEPTABLE_KDF as 82, but this value conflicts with
KRB_AP_ERR_PRINCIPAL_UNKNOWN from RFC 6111.  The former value has been
reassigned to 100 to fix the conflict.  Use the correct value.

We believe that this error won't crop up in practice for a long time
(when SHA-2 has been superceded by other hash algorithms and people
are desupporting it), by which time implementations will mostly have
been upgraded to use the new value.

(cherry picked from commit 2938851a5ec77ab68bcd1f5cfd07991c7ccabea6)

ticket: 7725 (new)
version_fixed: 1.10.7
status: resolved

diff --git a/src/lib/krb5/error_tables/krb5_err.et b/src/lib/krb5/error_tables/krb5_err.et
index eda7dc307c6b209703fe360f58e6795d8cfd2bda..5c6f10b23eaeedbfb87204ba7e0d1778729833c8 100644 (file)
--- a/src/lib/krb5/error_tables/krb5_err.et
+++ b/src/lib/krb5/error_tables/krb5_err.et
@@ -123,7 +123,7 @@ error_code KRB5KDC_ERR_DIGEST_IN_CERT_NOT_ACCEPTED, "Digest in certificate not a
 error_code KRB5KDC_ERR_PA_CHECKSUM_MUST_BE_INCLUDED,   "Checksum must be included"
 error_code KRB5KDC_ERR_DIGEST_IN_SIGNED_DATA_NOT_ACCEPTED,     "Digest in signed-data not accepted"
 error_code KRB5KDC_ERR_PUBLIC_KEY_ENCRYPTION_NOT_SUPPORTED,    "Public key encryption not supported"
-error_code KRB5KDC_ERR_NO_ACCEPTABLE_KDF,              "No acceptable KDF offered"
+error_code KRB5PLACEHOLD_82,   "KRB5 error code 82"
 error_code KRB5PLACEHOLD_83,   "KRB5 error code 83"
 error_code KRB5PLACEHOLD_84,   "KRB5 error code 84"
 error_code KRB5KRB_AP_ERR_IAKERB_KDC_NOT_FOUND,         "The IAKERB proxy could not find a KDC"
@@ -141,7 +141,7 @@ error_code KRB5PLACEHOLD_96,        "KRB5 error code 96"
 error_code KRB5PLACEHOLD_97,   "KRB5 error code 97"
 error_code KRB5PLACEHOLD_98,   "KRB5 error code 98"
 error_code KRB5PLACEHOLD_99,   "KRB5 error code 99"
-error_code KRB5PLACEHOLD_100,  "KRB5 error code 100"
+error_code KRB5KDC_ERR_NO_ACCEPTABLE_KDF,              "No acceptable KDF offered"
 error_code KRB5PLACEHOLD_101,  "KRB5 error code 101"
 error_code KRB5PLACEHOLD_102,  "KRB5 error code 102"
 error_code KRB5PLACEHOLD_103,  "KRB5 error code 103"