From: Kevin Wasserman <kevin.wasserman@painless-security.com>
Date: Mon, 16 Jul 2012 15:48:55 +0000 (-0400)
Subject: Set fCachesTicket=TRUE when no credentials
X-Git-Tag: krb5-1.11-alpha1~289
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=c654e9c7436cdd57cb61c0bd29b26c79e3675a01;p=thirdparty%2Fkrb5.git

Set fCachesTicket=TRUE when no credentials

It is not really clear this is correct, but neither was the
previous behavior.

Signed-off-by: Kevin Wasserman <kevin.wasserman@painless-security.com>

ticket: 7255 (new)
queue: kfw
target_version: 1.10.4
tags: pullup
---

diff --git a/src/lib/krb5/ccache/cc_mslsa.c b/src/lib/krb5/ccache/cc_mslsa.c
index f25658ebf1..39d78e78ea 100644
--- a/src/lib/krb5/ccache/cc_mslsa.c
+++ b/src/lib/krb5/ccache/cc_mslsa.c
@@ -655,7 +655,8 @@ does_retrieve_ticket_cache_ticket (void)
         LsaDeregisterLogonProcess(LogonHandle);
 
         if (FAILED(Status) || FAILED(SubStatus)) {
-            if ( SubStatus == STATUS_NOT_SUPPORTED )
+            if (SubStatus == STATUS_NOT_SUPPORTED ||
+                SubStatus == SEC_E_NO_CREDENTIALS)
                 /* The combination of the two CacheOption flags
                  * is not supported; therefore, the new flag is supported
                  */