From: Jeffrey Altman <jaltman@secure-endpoints.com>
Date: Sat, 4 Nov 2006 15:39:01 +0000 (+0000)
Subject: DEVEL15-rxkad-server-bad-ticket-20061103
X-Git-Tag: openafs-devel-1_5_11~21
X-Git-Url: https://git.michaelhowe.org/gitweb/?a=commitdiff_plain;h=862930dd35cfb97d8ff3cf67e57483fb3cebd74b;p=packages%2Fo%2Fopenafs.git

DEVEL15-rxkad-server-bad-ticket-20061103

FIXES 43862

The file server has been returning RXKADNOAUTH when the time between
the client and server is out of sync.  tkt_CheckTimes returns -1 for
recently expired tickets and -2 for tickets that have been expired for
a while.  In the -2 case we must return RXKADBADTICKET not RXKADNOAUTH.


(cherry picked from commit 799caa43b5417b40e43f38a690962b1d53bca374)
---

diff --git a/src/rxkad/rxkad_server.c b/src/rxkad/rxkad_server.c
index 92097da21..86608296e 100644
--- a/src/rxkad/rxkad_server.c
+++ b/src/rxkad/rxkad_server.c
@@ -358,7 +358,7 @@ rxkad_CheckResponse(struct rx_securityClass *aobj,
     if (code == -1)
 	return RXKADEXPIRED;
     else if (code <= 0)
-	return RXKADNOAUTH;
+	return RXKADBADTICKET;
 
     code = fc_keysched(&sessionkey, sconn->keysched);
     if (code)