kadm5: Revert part of 69eee19541
This commit is contained in:
@@ -325,17 +325,19 @@ kadm5_s_get_principal(void *server_handle,
|
|||||||
_krb5_put_int(buf, last_pw_expire, sizeof(buf));
|
_krb5_put_int(buf, last_pw_expire, sizeof(buf));
|
||||||
ret = add_tl_data(out, KRB5_TL_LAST_PWD_CHANGE, buf, sizeof(buf));
|
ret = add_tl_data(out, KRB5_TL_LAST_PWD_CHANGE, buf, sizeof(buf));
|
||||||
}
|
}
|
||||||
if (ret == 0)
|
|
||||||
ret = hdb_entry_get_krb5_config(&ent.entry, &krb5_config);
|
ret = hdb_entry_get_krb5_config(&ent.entry, &krb5_config);
|
||||||
if (ret == 0 && krb5_config.length) {
|
if (ret == 0 && krb5_config.length) {
|
||||||
ret = add_tl_data(out, KRB5_TL_KRB5_CONFIG, krb5_config.data,
|
ret = add_tl_data(out, KRB5_TL_KRB5_CONFIG, krb5_config.data,
|
||||||
krb5_config.length);
|
krb5_config.length);
|
||||||
|
if (ret)
|
||||||
|
goto out;
|
||||||
}
|
}
|
||||||
/*
|
/*
|
||||||
* If the client was allowed to get key data, let it have the
|
* If the client was allowed to get key data, let it have the
|
||||||
* password too.
|
* password too.
|
||||||
*/
|
*/
|
||||||
if (ret == 0 && (mask & KADM5_KEY_DATA)) {
|
if (mask & KADM5_KEY_DATA) {
|
||||||
heim_utf8_string pw;
|
heim_utf8_string pw;
|
||||||
|
|
||||||
/* XXX But not if the client doesn't have ext-keys */
|
/* XXX But not if the client doesn't have ext-keys */
|
||||||
@@ -344,12 +346,13 @@ kadm5_s_get_principal(void *server_handle,
|
|||||||
if (ret == 0) {
|
if (ret == 0) {
|
||||||
ret = add_tl_data(out, KRB5_TL_PASSWORD, pw, strlen(pw) + 1);
|
ret = add_tl_data(out, KRB5_TL_PASSWORD, pw, strlen(pw) + 1);
|
||||||
free(pw);
|
free(pw);
|
||||||
|
if (ret)
|
||||||
|
goto out;
|
||||||
}
|
}
|
||||||
krb5_clear_error_message(context->context);
|
krb5_clear_error_message(context->context);
|
||||||
}
|
}
|
||||||
|
|
||||||
if (ret == 0)
|
ret = hdb_entry_get_pkinit_acl(&ent.entry, &acl);
|
||||||
ret = hdb_entry_get_pkinit_acl(&ent.entry, &acl);
|
|
||||||
if (ret == 0 && acl) {
|
if (ret == 0 && acl) {
|
||||||
krb5_data buf;
|
krb5_data buf;
|
||||||
size_t len;
|
size_t len;
|
||||||
@@ -367,8 +370,7 @@ kadm5_s_get_principal(void *server_handle,
|
|||||||
goto out;
|
goto out;
|
||||||
}
|
}
|
||||||
|
|
||||||
if (ret == 0)
|
ret = hdb_entry_get_aliases(&ent.entry, &aliases);
|
||||||
ret = hdb_entry_get_aliases(&ent.entry, &aliases);
|
|
||||||
if (ret == 0 && aliases) {
|
if (ret == 0 && aliases) {
|
||||||
krb5_data buf;
|
krb5_data buf;
|
||||||
size_t len;
|
size_t len;
|
||||||
@@ -386,8 +388,7 @@ kadm5_s_get_principal(void *server_handle,
|
|||||||
goto out;
|
goto out;
|
||||||
}
|
}
|
||||||
|
|
||||||
if (ret == 0)
|
ret = hdb_entry_get_key_rotation(context->context, &ent.entry, &kr);
|
||||||
ret = hdb_entry_get_key_rotation(context->context, &ent.entry, &kr);
|
|
||||||
if (ret == 0 && kr) {
|
if (ret == 0 && kr) {
|
||||||
krb5_data buf;
|
krb5_data buf;
|
||||||
size_t len;
|
size_t len;
|
||||||
|
Reference in New Issue
Block a user