e3ffab
From 5d835f8ace9ec1b89c67585b22cd230c497cf833 Mon Sep 17 00:00:00 2001
e3ffab
From: Jan Cholasta <jcholast@redhat.com>
e3ffab
Date: Mon, 10 Nov 2014 17:40:35 +0000
e3ffab
Subject: [PATCH] Fix Kerberos error handling in ipa-sam
e3ffab
e3ffab
https://fedorahosted.org/freeipa/ticket/4713
e3ffab
e3ffab
Reviewed-By: Alexander Bokovoy <abokovoy@redhat.com>
e3ffab
---
e3ffab
 daemons/ipa-sam/ipa_sam.c | 2 +-
e3ffab
 1 file changed, 1 insertion(+), 1 deletion(-)
e3ffab
e3ffab
diff --git a/daemons/ipa-sam/ipa_sam.c b/daemons/ipa-sam/ipa_sam.c
e3ffab
index 3b69f9e8255490aac17d08033e2a3584c6bf9e24..e71129901b5ac1816c300b707e40c2e43d711338 100644
e3ffab
--- a/daemons/ipa-sam/ipa_sam.c
e3ffab
+++ b/daemons/ipa-sam/ipa_sam.c
e3ffab
@@ -4233,7 +4233,7 @@ static int bind_callback(LDAP *ldap_struct, struct smbldap_state *ldap_state, vo
e3ffab
 	krb5_free_principal(data.context, in_creds.server);
e3ffab
 	krb5_free_principal(data.context, in_creds.client);
e3ffab
 
e3ffab
-	if (rc) {
e3ffab
+	if (rc != 0 && rc != KRB5KRB_AP_ERR_TKT_NYV && rc != KRB5KRB_AP_ERR_TKT_EXPIRED) {
e3ffab
 		rc = bind_callback_obtain_creds(&data);
e3ffab
 		if (rc) {
e3ffab
 			bind_callback_cleanup(&data, rc);
e3ffab
-- 
e3ffab
2.1.0
e3ffab