set ticket_reply.enc_part.kvno after encrypting the encrypted part,

since the encrypt function zeros out the kvno.

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/marc-3des@10844 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/kdc/do_tgs_req.c b/src/kdc/do_tgs_req.c
index 4e9b1a25649311a5bef78ca8ef7b3070aea4d706..7faf748da3a5c717c570334ccb50c584e71b4433 100644 (file)
--- a/src/kdc/do_tgs_req.c
+++ b/src/kdc/do_tgs_req.c
@@ -547,7 +547,6 @@ tgt_again:
        if ((encrypting_key.enctype == ENCTYPE_DES_CBC_CRC) &&
            (isflagset(server.attributes, KRB5_KDB_SUPPORT_DESMD5)))
            encrypting_key.enctype = ENCTYPE_DES_CBC_MD5;
-       ticket_reply.enc_part.kvno = server_key->key_data_kvno;
        errcode = krb5_encrypt_tkt_part(kdc_context, &encrypting_key,
                                        &ticket_reply);
        krb5_free_keyblock_contents(kdc_context, &encrypting_key);
@@ -555,6 +554,7 @@ tgt_again:
            status = "TKT_ENCRYPT";
            goto cleanup;
        }
+       ticket_reply.enc_part.kvno = server_key->key_data_kvno;
     }
 
     /* Start assembling the response */