[Heimdal-source-changes] [heimdal/heimdal] f50949: lib/krb5: send_to_kdc KRB5KDC_ERR_SVC_UNAVAILABLE ...

[GitHub]

  Branch: refs/heads/jaltman/lib-krb5-svc-unavailable
  Home:   https://github.com/heimdal/heimdal
  Commit: f5094981ef912aaa84e55209d6a819bdf32a66de
      https://github.com/heimdal/heimdal/commit/f5094981ef912aaa84e55209d6a819bdf32a66de
  Author: Jeffrey Altman <jaltman at secure-endpoints.com>
  Date:   2018-12-26 (Wed, 26 Dec 2018)

  Changed paths:
    M lib/krb5/send_to_kdc.c

  Log Message:
  -----------
  lib/krb5: send_to_kdc KRB5KDC_ERR_SVC_UNAVAILABLE infinite loop #346

Prior to this change a KDC response of KRB5KDC_ERR_SVC_UNAVAILABLE
would result in the client looping forever.  Setting the action to
KRB5_SENTO_CONTINUE repeats the current loop without altering the
current state.  Hence the infinite loop.

As of this change, the action is set to KRB5_SENDTO_RESET which
forces the current kdc's response to be cleared and then to retry.
If KRB5KDC_ERR_SVC_UNAVAILABLE continues to be returned, the retry
limit will be reached and the loop will end.

This bug was filed by multiple sources including Samba and ScottUrban
on github.

Change-Id: If1611be0ada3422cefae89541ed3b3df1f6efe29



      **NOTE:** This service has been marked for deprecation: https://developer.github.com/changes/2018-04-25-github-services-deprecation/

      Functionality will be removed from GitHub.com on January 31st, 2019.