(do_version4): if an tgs-req is received with an old kvno, return an

error reply and write a message in the log.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@7932 ec53bebd-3082-4978-b11e-865c3cabbd6b

kdc/kerberos4.c

@@ -307,6 +307,10 @@ do_version4(unsigned char *buf,
 	}
 	
 	if(tgt->kvno != kvno){
+	    kdc_log(0, "tgs-req with old kvno %d (current %d) for "
+		    "krbtgt.%s@%s", kvno, tgt->kvno, realm, v4_realm);
+	    make_err_reply(reply, KDC_AUTH_EXP,
+			   "old krbtgt kvno used");
 	    goto out2;
 	}