Set fCachesTicket=TRUE when no credentials

It is not really clear this is correct, but neither was the
previous behavior.

Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com>
ticket: 7255 (new)
queue: kfw
target_version: 1.10.4
tags: pullup

diff --git a/src/lib/krb5/ccache/cc_mslsa.c b/src/lib/krb5/ccache/cc_mslsa.c
index f25658ebf1cf6b0fc07b35a447a9306d02f05297..39d78e78ea2858a10268ac0aa0cd7a6058d9da72 100644 (file)
--- a/src/lib/krb5/ccache/cc_mslsa.c
+++ b/src/lib/krb5/ccache/cc_mslsa.c
@@ -655,7 +655,8 @@ does_retrieve_ticket_cache_ticket (void)
         LsaDeregisterLogonProcess(LogonHandle);
 
         if (FAILED(Status) || FAILED(SubStatus)) {
-            if ( SubStatus == STATUS_NOT_SUPPORTED )
+            if (SubStatus == STATUS_NOT_SUPPORTED ||
+                SubStatus == SEC_E_NO_CREDENTIALS)
                 /* The combination of the two CacheOption flags
                  * is not supported; therefore, the new flag is supported
                  */