From 52b1dffa6313b956407a0c115bbfbd7cf06fd8f3 Mon Sep 17 00:00:00 2001 From: Luke Howard Date: Sat, 1 Jan 2022 23:19:42 +1100 Subject: [PATCH] kdc: return KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN (PA) Return KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN, not HDB_ERR_NOENTRY, if a client principal could not be found during pre-authentication. This fixes a regression introduced with synthetic principals in 00358252d3. --- kdc/kerberos5.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/kdc/kerberos5.c b/kdc/kerberos5.c index ce1138405..a755a65dc 100644 --- a/kdc/kerberos5.c +++ b/kdc/kerberos5.c @@ -2289,7 +2289,7 @@ _kdc_as_rep(astgs_request_t r) if (r->client->entry.flags.synthetic && !(pat[n].flags & PA_SYNTHETIC_OK)) { kdc_log(r->context, config, 4, "UNKNOWN -- %s", r->cname); - ret = HDB_ERR_NOENTRY; + ret = KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN; goto out; } _kdc_audit_addkv((kdc_request_t)r, KDC_AUDIT_VIS, "pa", "%s", @@ -2344,7 +2344,7 @@ _kdc_as_rep(astgs_request_t r) if (r->client->entry.flags.synthetic) { kdc_log(r->context, config, 4, "UNKNOWN -- %s", r->cname); - ret = HDB_ERR_NOENTRY; + ret = KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN; goto out; }