Check invalid flag.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@3402 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Johan Danielsson
1997-09-07 12:33:40 +00:00
parent c9bd7adcee
commit b293e5caea

View File

@@ -147,7 +147,19 @@ as_rep(KDC_REQ *req,
goto out; goto out;
} }
if (client->pw_end && *client->pw_end < kdc_time if (client->flags.invalid) {
ret = KRB5KDC_ERR_POLICY;
kdc_log(0, "Client (%s) has invalid bit set", client_name);
goto out;
}
if (server->flags.invalid) {
ret = KRB5KDC_ERR_POLICY;
kdc_log(0, "Server (%s) has invalid bit set", server_name);
goto out;
}
if (client->pw_end && *client->pw_end < kdc_time
&& !server->flags.change_pw) { && !server->flags.change_pw) {
ret = KRB5KDC_ERR_KEY_EXPIRED; ret = KRB5KDC_ERR_KEY_EXPIRED;
kdc_log(0, "Client (%s)'s key has expired", client_name); kdc_log(0, "Client (%s)'s key has expired", client_name);