[krbdev.mit.edu #8862] Documentation__krb5_get_init_creds_password - Get initial credentials using a password.
"Fabian Müller via RT" <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.bugs |
|---|---|
| Message-ID | <[email protected]> |
Thu Jan 09 11:27:15 2020: Request 8862 was acted upon. Transaction: Ticket created by [email protected] Queue: krb5 Subject: Documentation__krb5_get_init_creds_password - Get initial credentials using a password. Owner: Nobody Requestors: [email protected] Status: new Ticket <URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=8862 > Dear maintainers, I noticed that when krb5_get_init_creds_password is called using an incorrect password, the error code returned is KRB5KDC_ERR_PREAUTH_FAILED (using release 1.17). This is not among the possible return values mentioned in https://web.mit.edu/kerberos/krb5-latest/doc/appdev/refs/api/krb5_get_init_creds_password.html. Due to the necessary external setup, it is a bit hard to provide a minimal working example, but the libkrb5 source itself seems to agree that this is a possible return value (see e.g. https://github.com/krb5/krb5/blob/krb5-1.17-final/src/clients/kinit/kinit.c#L773-L811). Possibly the list of return values in the documentation is not meant to be exhaustive; in that case the documentation should say so. Kind regards, Fabian Müller ------------------------------------------------------------------------------ FIZ Karlsruhe - Leibniz-Institut für Informationsinfrastruktur GmbH. Sitz der Gesellschaft: Eggenstein-Leopoldshafen, Amtsgericht Mannheim HRB 101892. Geschäftsführerin: Sabine Brünger-Weilandt. Vorsitzende des Aufsichtsrats: MinDirig’in Dr. Angelika Willms-Herget. FIZ Karlsruhe ist zertifiziert mit dem Siegel "audit berufundfamilie". _______________________________________________ krb5-bugs mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/krb5-bugs