From 799caa43b5417b40e43f38a690962b1d53bca374 Mon Sep 17 00:00:00 2001
From: Jeffrey Altman <jaltman@secure-endpoints.com>
Date: Sat, 4 Nov 2006 15:34:58 +0000
Subject: [PATCH] rxkad-server-bad-ticket-20061103

FIXES 43862

The file server has been returning RXKADNOAUTH when the time between
the client and server is out of sync.  tkt_CheckTimes returns -1 for
recently expired tickets and -2 for tickets that have been expired for
a while.  In the -2 case we must return RXKADBADTICKET not RXKADNOAUTH.
---
 src/rxkad/rxkad_server.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/rxkad/rxkad_server.c b/src/rxkad/rxkad_server.c
index 92097da21..86608296e 100644
--- a/src/rxkad/rxkad_server.c
+++ b/src/rxkad/rxkad_server.c
@@ -358,7 +358,7 @@ rxkad_CheckResponse(struct rx_securityClass *aobj,
     if (code == -1)
 	return RXKADEXPIRED;
     else if (code <= 0)
-	return RXKADNOAUTH;
+	return RXKADBADTICKET;
 
     code = fc_keysched(&sessionkey, sconn->keysched);
     if (code)
-- 
2.39.5