From a3ac6764949f0403f247bf722d2423f67fdbc987 Mon Sep 17 00:00:00 2001
From: Assar Westerlund <assar@sics.se>
Date: Sat, 12 Jul 1997 21:32:03 +0000
Subject: [PATCH] check if the pre-auth was decrypted properly. set the
 `pre_authent' flag

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@2214 ec53bebd-3082-4978-b11e-865c3cabbd6b
---
 kdc/kerberos5.c | 22 +++++++++++++++-------
 1 file changed, 15 insertions(+), 7 deletions(-)

diff --git a/kdc/kerberos5.c b/kdc/kerberos5.c
index 44818217c..59d701a85 100644
--- a/kdc/kerberos5.c
+++ b/kdc/kerberos5.c
@@ -83,12 +83,20 @@ as_rep(krb5_context context,
 	    return 0;
 	}
 
-	krb5_decrypt (context,
-		      enc_data.cipher.data,
-		      enc_data.cipher.length,
-		      enc_data.etype,
-		      &client->keyblock,
-		      &ts_data);
+	e = krb5_decrypt (context,
+			  enc_data.cipher.data,
+			  enc_data.cipher.length,
+			  enc_data.etype,
+			  &client->keyblock,
+			  &ts_data);
+	if (e) {
+	    krb5_mk_error (client_princ,
+			   KRB5KRB_AP_ERR_BAD_INTEGRITY,
+			   "Couldn't decode",
+			   NULL,
+			   reply);
+	    return 0;
+	}
 	e = decode_PA_ENC_TS_ENC(ts_data.data,
 				 ts_data.length,
 				 &p,
@@ -109,7 +117,7 @@ as_rep(krb5_context context,
 			   reply);
 	    return 0;
 	}
-
+	et->flags.pre_authent = 1;
     }
 
     /* Find appropriate key */