From 4e1ef7a3ce69b6166fa823181da65c02d0522d39 Mon Sep 17 00:00:00 2001
From: Johan Danielsson <joda@pdc.kth.se>
Date: Tue, 21 Oct 1997 18:21:34 +0000
Subject: [PATCH] Check version number of krbtgt.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3654 ec53bebd-3082-4978-b11e-865c3cabbd6b
---
 kdc/kerberos5.c | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/kdc/kerberos5.c b/kdc/kerberos5.c
index 4affb380a..8e3a1a164 100644
--- a/kdc/kerberos5.c
+++ b/kdc/kerberos5.c
@@ -1097,6 +1097,15 @@ tgs_rep2(KDC_REQ_BODY *b,
 	goto out2;
     }
     
+    if(ap_req.ticket.enc_part.kvno && 
+       *ap_req.ticket.enc_part.kvno != krbtgt->kvno){
+	kdc_log(0, "Ticket kvno = %d, DB kvno = %d", 
+		*ap_req.ticket.enc_part.kvno,
+		krbtgt->kvno);
+	ret = KRB5KRB_AP_ERR_BADKEYVER;
+	goto out2;
+    }
+
     ret = hdb_etype2key(context, krbtgt, ap_req.ticket.enc_part.etype, &tkey);
     if(ret){
 	char *str;