oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

Check locked-out flag for client and server.

Browse Source 
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25306 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
Love Hörnquist Åstrand
2009-07-03 04:32:56 +00:00
parent 8e2e176812
commit d3de015b79
1 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
kdc/kerberos5.c
View File

@@ -678,6 +678,12 @@ kdc_check_flags(krb5_context context,
hdb_entry *client = &client_ex->entry; hdb_entry *client = &client_ex->entry;
/* check client */ /* check client */
if (client->flags.locked_out) {
kdc_log(context, config, 0,
"Client (%s) is locked out", client_name);
return KRB5KDC_ERR_POLICY;
}
if (client->flags.invalid) { if (client->flags.invalid) {
kdc_log(context, config, 0, kdc_log(context, config, 0,
"Client (%s) has invalid bit set", client_name); "Client (%s) has invalid bit set", client_name);
@@ -727,6 +733,11 @@ kdc_check_flags(krb5_context context,
if (server_ex != NULL) { if (server_ex != NULL) {
hdb_entry *server = &server_ex->entry; hdb_entry *server = &server_ex->entry;
if (server->flags.locked_out) {
kdc_log(context, config, 0,
"Client server locked out -- %s", server_name);
return KRB5KDC_ERR_POLICY;
}
if (server->flags.invalid) { if (server->flags.invalid) {
kdc_log(context, config, 0, kdc_log(context, config, 0,
"Server has invalid flag set -- %s", server_name); "Server has invalid flag set -- %s", server_name);