kdc: Check generate_pac() return code

If the function fails, we should not issue a ticket missing the PAC.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
This commit is contained in:
Joseph Sutton
2022-06-16 15:26:07 +12:00
committed by Jeffrey Altman
parent f4faaeaba3
commit 05e589d247

View File

@@ -2656,7 +2656,9 @@ _kdc_as_rep(astgs_request_t r)
/* Add the PAC */
if (!r->et.flags.anonymous) {
generate_pac(r, skey, krbtgt_key, is_tgs);
ret = generate_pac(r, skey, krbtgt_key, is_tgs);
if (ret)
goto out;
}
if (r->client->flags.synthetic) {