From e6cee493ed8840377ec36f7aaae5d1d38cfa8afb Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= <lha@kth.se>
Date: Tue, 9 Aug 2005 21:34:36 +0000
Subject: [PATCH] (_kdc_as_rep): preserve the error code in the ENC-TS case.
 From: Andrew Bartlett <abartlet@samba.org>

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@15861 ec53bebd-3082-4978-b11e-865c3cabbd6b
---
 kdc/kerberos5.c | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/kdc/kerberos5.c b/kdc/kerberos5.c
index 77fd8a383..bbad5c993 100644
--- a/kdc/kerberos5.c
+++ b/kdc/kerberos5.c
@@ -930,17 +930,19 @@ _kdc_as_rep(krb5_context context,
 					      &ts_data);
 	    krb5_crypto_destroy(context, crypto);
 	    if(ret){
-		ret = krb5_enctype_to_string(context, 
+		krb5_error_code ret2;
+		ret2 = krb5_enctype_to_string(context, 
 					     pa_key->key.keytype, &str);
-		if (ret)
+		if (ret2)
 		    str = NULL;
 		kdc_log(context, config, 5, 
 			"Failed to decrypt PA-DATA -- %s "
-			"(enctype %s) error %d",
-			client_name, str ? str : "unknown enctype", ret);
+			"(enctype %s) error %s",
+			client_name,
+			str ? str : "unknown enctype", 
+			krb5_get_err_text(context, ret));
 		free(str);
 
-
 		if(hdb_next_enctype2key(context, client, 
 					enc_data.etype, &pa_key) == 0)
 		    goto try_next_key;