changeset 9656:6862d534e5b1 HEAD

auth: Fixed error handling in GSSAPI when __gss_userok() was used. An invalid username would have been treated as successful and auth process probably would have crashed.
author Timo Sirainen <tss@iki.fi>
date Tue, 17 Jul 2012 16:20:20 +0300
parents a56eb5db0d87
children d6bd9acd97e7
files src/auth/mech-gssapi.c
diffstat 1 files changed, 2 insertions(+), 2 deletions(-) [+]
line wrap: on
line diff
--- a/src/auth/mech-gssapi.c	Wed Jun 20 02:21:54 2012 +0300
+++ b/src/auth/mech-gssapi.c	Tue Jul 17 16:20:20 2012 +0300
@@ -392,8 +392,8 @@
 	bool ret = FALSE;
 
 	/* Parse out the principal's username */
-	if (!get_display_name(&request->auth_request, name, &name_type,
-			      &princ_display_name) < 0)
+	if (get_display_name(&request->auth_request, name, &name_type,
+			     &princ_display_name) < 0)
 		return FALSE;
 
 	if (!mech_gssapi_oid_cmp(name_type, GSS_KRB5_NT_PRINCIPAL_NAME) &&