From 85617fb775a9aaf2d076484583a951e0f458afcd Mon Sep 17 00:00:00 2001 From: Sam Hartman Date: Thu, 26 Mar 2009 05:37:34 +0000 Subject: [PATCH] FAST response only when FAST in use Client should expect a FAST response only when fast is being ussed. krb5int_fast_process_response now returns success if FAST is not in use. git-svn-id: svn://anonsvn.mit.edu/krb5/branches/fast@22143 dc483132-0cff-0310-8789-dd5450dbe970 --- src/lib/krb5/krb/fast.c | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/src/lib/krb5/krb/fast.c b/src/lib/krb5/krb/fast.c index 51dfe04da7..e9f54be788 100644 --- a/src/lib/krb5/krb/fast.c +++ b/src/lib/krb5/krb/fast.c @@ -257,8 +257,7 @@ static krb5_error_code decrypt_fast_reply krb5_pa_data *fx_reply = NULL; krb5_fast_response *local_resp = NULL; assert(state != NULL); - if (state->armor_key == NULL) - return 0; + assert(state->armor_key); fx_reply = krb5int_find_pa_data(context, in_padata, KRB5_PADATA_FX_FAST); if (fx_reply == NULL) retval = KRB5_ERR_FAST_REQUIRED; @@ -417,6 +416,8 @@ krb5_error_code krb5int_fast_process_response krb5_boolean cksum_valid; krb5_clear_error_message(context); *as_key = NULL; + if (state->armor_key == 0) + return 0; retval = decrypt_fast_reply(context, state, resp->padata, &fast_response); if (retval == 0) { -- 2.47.2