Re: Race condition on change of expired password?

Russ Allbery <[email protected]> writes:

> I think buf2 needs to be lifted to the outside scope, and in the above
> change password code there should be a:

>     password = buf2;

> before retrying so that the new password is used for the retry.

> Also, buf2 needs to be cleared.

> Attached is a proposed patch, although I've not tested it.  Also pushed
> to rra/heimdal on github.

I have subsequently tested this patch and confirms that it works as
expected and fixes reauthentication after password change.

-- 
Russ Allbery ([email protected])             <http://www.eyrie.org/~eagle/>