From 5ba324eae7140e13e1d9c38b9c15ad53c5a59674 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= <lha@kth.se>
Date: Fri, 15 Dec 2006 20:06:54 +0000
Subject: [PATCH] (handle_type3): verify that the kdc approved of the ntlm
 exchange too

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19364 ec53bebd-3082-4978-b11e-865c3cabbd6b
---
 lib/gssapi/ntlm/accept_sec_context.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/lib/gssapi/ntlm/accept_sec_context.c b/lib/gssapi/ntlm/accept_sec_context.c
index 324d8ec18..97c309e7f 100644
--- a/lib/gssapi/ntlm/accept_sec_context.c
+++ b/lib/gssapi/ntlm/accept_sec_context.c
@@ -164,6 +164,11 @@ handle_type3(OM_uint32 *minor_status,
     if (ret)
 	goto out;
 
+    if (krb5_ntlm_rep_get_status(ctx->context, ctx->ntlm) != TRUE) {
+	ret = EINVAL;
+	goto out;
+    }
+
     return GSS_S_COMPLETE;
 out:
     *minor_status = ret;