diff options
Diffstat (limited to 'src/kdc/do_as_req.c')
| -rw-r--r-- | src/kdc/do_as_req.c | 14 |
1 files changed, 8 insertions, 6 deletions
diff --git a/src/kdc/do_as_req.c b/src/kdc/do_as_req.c index 6f2a1e1..4951d29 100644 --- a/src/kdc/do_as_req.c +++ b/src/kdc/do_as_req.c @@ -557,12 +557,6 @@ process_as_req(krb5_kdc_req *request, krb5_data *req_pkt, reply.client->realm.data, reply.client->data->data); #endif /* APPLE_PKINIT */ - errcode = return_enc_padata(kdc_context, req_pkt, request, - &server, &reply_encpart); - if (errcode) { - status = "KDC_RETURN_ENC_PADATA"; - goto errout; - } errcode = handle_authdata(kdc_context, @@ -608,6 +602,14 @@ process_as_req(krb5_kdc_req *request, krb5_data *req_pkt, status = "generating reply key"; goto errout; } + errcode = return_enc_padata(kdc_context, req_pkt, request, + as_encrypting_key, + &server, &reply_encpart); + if (errcode) { + status = "KDC_RETURN_ENC_PADATA"; + goto errout; + } + errcode = krb5_encode_kdc_rep(kdc_context, KRB5_AS_REP, &reply_encpart, 0, as_encrypting_key, &reply, response); reply.enc_part.kvno = client_key->key_data_kvno; |