From: Harlan Stenn <stenn@ntp.org>
Date: Mon, 4 Apr 2005 04:22:10 +0000 (-0400)
Subject: Changes from Dave Mills
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d4d6b3654a1ee88ea6eded90445da4883a76ef33;p=thirdparty%2Fntp.git

Changes from Dave Mills

bk: 4250c0f2sqaOLzvuukNBbWyxTnwMPQ
---

diff --git a/ntpd/ntp_proto.c b/ntpd/ntp_proto.c
index d83993d216..7f31d63321 100644
--- a/ntpd/ntp_proto.c
+++ b/ntpd/ntp_proto.c
@@ -790,12 +790,12 @@ receive(
 		 * If the inbound packet is correctly authenticated and
 		 * enabled, a symmetric passive association is
 		 * mobilized. If not but correctly authenticated, a
-		 * symmetric active response is sent. A crypto-NAK is
-		 * returned if authentication fails. 
+		 * symmetric active response is sent. If authentication
+		 * fails, send a crypto-NAK packet. 
 		 */
 		if (!AUTH(restrict_mask & RES_DONTTRUST, is_authentic))
 		    {
-			if (skeyid)
+			if (is_authentic == AUTH_ERROR)
 				fast_xmit(rbufp, MODE_ACTIVE, 0,
 				    restrict_mask);
 			return;			/* bad auth */