Given better error message when user is not authoized to login.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@826 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
		| @@ -302,9 +302,22 @@ kerberos4_is(ap, data, cnt) | |||||||
|  |  | ||||||
| 		if (UserNameRequested && !kuserok(&adat, UserNameRequested)) | 		if (UserNameRequested && !kuserok(&adat, UserNameRequested)) | ||||||
| 			Data(ap, KRB_ACCEPT, (void *)0, 0); | 			Data(ap, KRB_ACCEPT, (void *)0, 0); | ||||||
| 		else | 		else { | ||||||
| 			Data(ap, KRB_REJECT, | 			char *msg = malloc(ANAME_SZ + 1 + INST_SZ + | ||||||
| 				(void *)"user is not authorized", -1); | 					   REALM_SZ + | ||||||
|  | 					   strlen(UserNameRequested) + 80); | ||||||
|  | 			 | ||||||
|  | 			if (msg == NULL) | ||||||
|  | 				Data(ap, KRB_REJECT, (void *)0, 0); | ||||||
|  | 			sprintf (msg, "user `%s%s%s@%s' is not authorized " | ||||||
|  | 				 "to login as `%s'", adat.pname, | ||||||
|  | 				 *adat.pinst == '\0' ? "" : ".", | ||||||
|  | 				 adat.pinst,  | ||||||
|  | 				 adat.prealm, | ||||||
|  | 				 UserNameRequested); | ||||||
|  | 			Data(ap, KRB_REJECT, (void *)msg, -1); | ||||||
|  | 			free(msg); | ||||||
|  | 		} | ||||||
| 		auth_finished(ap, AUTH_USER); | 		auth_finished(ap, AUTH_USER); | ||||||
| 		break; | 		break; | ||||||
|  |  | ||||||
|   | |||||||
		Reference in New Issue
	
	Block a user
	 Assar Westerlund
					Assar Westerlund