Re: heimdal 0.5.2 and v4 cross-realm

[joda@pdc.kth.se (Johan Danielsson)]

This patch makes the KDC returns an error to the client if cross-realm
524 is denied, which should make the timeouts go away.

As this is mostly cosmetics, we will not make a new release with just
this. There will hopefully be a 0.6 out in not too long.

If you feel like it, you can try the snapshots found in
ftp://ftp.pdc.kth.se/pub/heimdal/src/snapshots/. Note the meaning of
the word "snapshot" - they might not work as expected.

/Johan

--- kdc/524.c	2003/03/17 06:46:44	1.25.4.1
+++ kdc/524.c	2003/03/18 14:42:52	1.25.4.2
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 1997-2002 Kungliga Tekniska Högskolan
+ * Copyright (c) 1997-2003 Kungliga Tekniska Högskolan
  * (Royal Institute of Technology, Stockholm, Sweden). 
  * All rights reserved. 
  *
@@ -33,7 +33,7 @@
 
 #include "kdc_locl.h"
 
-RCSID("$Id: 524.c,v 1.25.4.1 2003/03/17 06:46:44 assar Exp $");
+RCSID("$Id: 524.c,v 1.25.4.2 2003/03/18 14:42:52 joda Exp $");
 
 #ifdef KRB4
 
@@ -254,7 +254,8 @@
     if (!enable_v4_cross_realm && strcmp (et.crealm, t->realm) != 0) {
 	kdc_log(0, "524 cross-realm %s -> %s disabled", et.crealm,
 		t->realm);
-	return KRB5KDC_ERR_POLICY;
+	ret = KRB5KDC_ERR_POLICY;
+	goto out;
     }
 
     ret = encode_v4_ticket(buf + sizeof(buf) - 1, sizeof(buf),