kdc: Check generate_pac() return code
If the function fails, we should not issue a ticket missing the PAC. Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
This commit is contained in:

committed by
Jeffrey Altman

parent
f4faaeaba3
commit
05e589d247
@@ -2656,7 +2656,9 @@ _kdc_as_rep(astgs_request_t r)
|
|||||||
|
|
||||||
/* Add the PAC */
|
/* Add the PAC */
|
||||||
if (!r->et.flags.anonymous) {
|
if (!r->et.flags.anonymous) {
|
||||||
generate_pac(r, skey, krbtgt_key, is_tgs);
|
ret = generate_pac(r, skey, krbtgt_key, is_tgs);
|
||||||
|
if (ret)
|
||||||
|
goto out;
|
||||||
}
|
}
|
||||||
|
|
||||||
if (r->client->flags.synthetic) {
|
if (r->client->flags.synthetic) {
|
||||||
|
Reference in New Issue
Block a user