X-Git-Url: http://andersk.mit.edu/gitweb/gssapi-openssh.git/blobdiff_plain/fe4ad27384e843fd03f01a4e4a0d457a90f312be..3114afc159b3a2502eb5675b5b07484f6e71b71a:/openssh/auth-krb5.c diff --git a/openssh/auth-krb5.c b/openssh/auth-krb5.c index 5f554a6..38164fd 100644 --- a/openssh/auth-krb5.c +++ b/openssh/auth-krb5.c @@ -1,3 +1,4 @@ +/* $OpenBSD: auth-krb5.c,v 1.19 2006/08/03 03:34:41 deraadt Exp $ */ /* * Kerberos v5 authentication and ticket-passing routines. * @@ -28,18 +29,27 @@ */ #include "includes.h" -RCSID("$OpenBSD: auth-krb5.c,v 1.15 2003/11/21 11:57:02 djm Exp $"); +#include +#include +#include + +#include "xmalloc.h" #include "ssh.h" #include "ssh1.h" #include "packet.h" -#include "xmalloc.h" #include "log.h" +#include "buffer.h" #include "servconf.h" #include "uidswap.h" +#include "key.h" +#include "hostfile.h" #include "auth.h" #ifdef KRB5 +#include +#include +#include #include extern ServerOptions options; @@ -69,9 +79,6 @@ auth_krb5_password(Authctxt *authctxt, const char *password) krb5_ccache ccache = NULL; int len; - if (!authctxt->valid) - return (0); - temporarily_use_uid(authctxt->pw); problem = krb5_init(authctxt); @@ -193,7 +200,7 @@ auth_krb5_password(Authctxt *authctxt, const char *password) else return (0); } - return (1); + return (authctxt->valid ? 1 : 0); } void @@ -229,7 +236,7 @@ ssh_krb5_cc_gen(krb5_context ctx, krb5_ccache *ccache) { ret = snprintf(ccname, sizeof(ccname), cctemplate, geteuid()); - if (ret == -1 || ret >= (int) sizeof(ccname)) + if (ret < 0 || (size_t)ret >= sizeof(ccname)) return ENOMEM; #ifndef USE_CCAPI