if(ret)
goto fail;
- ret = krb5_generate_subkey_extended(context, &krbtgt->session,
- ETYPE_NULL, &key);
+ ret = krb5_auth_con_generatelocalsubkey(context, ac, &krbtgt->session);
if (ret)
goto fail;
- ret = krb5_auth_con_setlocalsubkey(context, ac, key);
- if (ret)
- goto fail;
-
- ret = set_auth_data (context, &t->req_body, &in_creds->authdata, key);
+ ret = set_auth_data (context, &t->req_body, &in_creds->authdata,
+ ac->local_subkey);
if (ret)
goto fail;
if(ret)
goto fail;
- *subkey = key;
- key = NULL;
-
+ ret = krb5_auth_con_getlocalsubkey(context, ac, subkey);
+ if (ret)
+ goto fail;
+
fail:
- if (key)
- krb5_free_keyblock (context, key);
if (ac)
krb5_auth_con_free(context, ac);
if (ret) {