From 2f94c7de753188916552fb286cfdb53587ff6668 Mon Sep 17 00:00:00 2001 From: Assar Westerlund Date: Sun, 13 Feb 2000 19:27:36 +0000 Subject: [PATCH] (do_version4): if an tgs-req is received with an old kvno, return an error reply and write a message in the log. git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@7932 ec53bebd-3082-4978-b11e-865c3cabbd6b --- kdc/kerberos4.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/kdc/kerberos4.c b/kdc/kerberos4.c index 1fb2459c6..13b7b511b 100644 --- a/kdc/kerberos4.c +++ b/kdc/kerberos4.c @@ -307,6 +307,10 @@ do_version4(unsigned char *buf, } if(tgt->kvno != kvno){ + kdc_log(0, "tgs-req with old kvno %d (current %d) for " + "krbtgt.%s@%s", kvno, tgt->kvno, realm, v4_realm); + make_err_reply(reply, KDC_AUTH_EXP, + "old krbtgt kvno used"); goto out2; }