r21448: return the same error codes as a windows KDC

metze

diff --git a/source/heimdal/kdc/kerberos5.c b/source/heimdal/kdc/kerberos5.c
index 3d45c1099cbf3b77d92e73dcf313e406b02d8d6c..bb0fda89e7693b5b9672faa38327529d8df82566 100644 (file)
--- a/source/heimdal/kdc/kerberos5.c
+++ b/source/heimdal/kdc/kerberos5.c
@@ -1085,7 +1085,7 @@ _kdc_as_rep(krb5_context context,
            if(ret){
                char *estr;
                e_text = "No key matches pa-data";
-               ret = KRB5KDC_ERR_PREAUTH_FAILED;
+               ret = KRB5KDC_ERR_ETYPE_NOSUPP;
                if(krb5_enctype_to_string(context, enc_data.etype, &estr))
                    estr = NULL;
                if(estr == NULL)
@@ -1137,7 +1137,7 @@ _kdc_as_rep(krb5_context context,
                e_text = "Failed to decrypt PA-DATA";
 
                free_EncryptedData(&enc_data);
-               ret = KRB5KRB_AP_ERR_BAD_INTEGRITY;
+               ret = KRB5KDC_ERR_PREAUTH_FAILED;
                continue;
            }
            free_EncryptedData(&enc_data);
@@ -1148,7 +1148,7 @@ _kdc_as_rep(krb5_context context,
            krb5_data_free(&ts_data);
            if(ret){
                e_text = "Failed to decode PA-ENC-TS-ENC";
-               ret = KRB5KRB_AP_ERR_BAD_INTEGRITY;
+               ret = KRB5KDC_ERR_PREAUTH_FAILED;
                kdc_log(context, config, 
                        5, "Failed to decode PA-ENC-TS_ENC -- %s",
                        client_name);