From: Kevin Wasserman <kevin.wasserman@painless-security.com>
Date: Mon, 16 Jul 2012 15:48:55 +0000 (-0400)
Subject: Set fCachesTicket=TRUE when no credentials
X-Git-Tag: kfw-4.0-final~105
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c27a2ea0869a983e482ccbac005291f1a3884603;p=thirdparty%2Fkrb5.git

Set fCachesTicket=TRUE when no credentials

It is not really clear this is correct, but neither was the
previous behavior.

Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com>

(cherry picked from commit c654e9c7436cdd57cb61c0bd29b26c79e3675a01)

ticket: 7255
status: resolved
---

diff --git a/src/lib/krb5/ccache/cc_mslsa.c b/src/lib/krb5/ccache/cc_mslsa.c
index f25658ebf1..39d78e78ea 100644
--- a/src/lib/krb5/ccache/cc_mslsa.c
+++ b/src/lib/krb5/ccache/cc_mslsa.c
@@ -655,7 +655,8 @@ does_retrieve_ticket_cache_ticket (void)
         LsaDeregisterLogonProcess(LogonHandle);
 
         if (FAILED(Status) || FAILED(SubStatus)) {
-            if ( SubStatus == STATUS_NOT_SUPPORTED )
+            if (SubStatus == STATUS_NOT_SUPPORTED ||
+                SubStatus == SEC_E_NO_CREDENTIALS)
                 /* The combination of the two CacheOption flags
                  * is not supported; therefore, the new flag is supported
                  */