Received: from biscayne-one-station.mit.edu (BISCAYNE-ONE-STATION.MIT.EDU [18.7.7.80]) by krbdev.mit.edu (8.9.3p2) with ESMTP id RAA17994; Fri, 7 Oct 2005 17:42:06 -0400 (EDT) Received: from outgoing.mit.edu (OUTGOING-AUTH.MIT.EDU [18.7.22.103]) by biscayne-one-station.mit.edu (8.12.4/8.9.2) with ESMTP id j97Lg5VP004593 for ; Fri, 7 Oct 2005 17:42:05 -0400 (EDT) Received: from cathode-dark-space.mit.edu (CATHODE-DARK-SPACE.MIT.EDU [18.18.1.96]) (authenticated bits=56) (User authenticated as tlyu@ATHENA.MIT.EDU) by outgoing.mit.edu (8.13.1/8.12.4) with ESMTP id j97LfwrV026337 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for ; Fri, 7 Oct 2005 17:41:58 -0400 (EDT) Received: (from tlyu@localhost) by cathode-dark-space.mit.edu (8.12.9) id j97LfwqF007718; Fri, 7 Oct 2005 17:41:58 -0400 (EDT) To: rt@krbdev.mit.edu Subject: Re: [krbdev.mit.edu #3092] cpw protocol does not return the result string during "min pw life not expired" References: From: Tom Yu Date: Fri, 07 Oct 2005 17:41:57 -0400 In-Reply-To: (Shawn Emery via's message of "Wed, 8 Jun 2005 14:34:49 -0400 (EDT)") Message-Id: Lines: 16 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Spam-Score: 2.292 X-Spam-Level: ** (2.292) X-Spam-Flag: NO X-Scanned-BY: MIMEDefang 2.42 RT-Send-Cc: X-RT-Original-Encoding: us-ascii Content-Length: 663 >>>>> "Shawn" == Shawn Emery via RT writes: Shawn> The result string is not being generated in the KRB-PRIV message by the Shawn> MIT kadmin server. The specific failure is when the password's minimum Shawn> life has not expired. This is from the fact that check_min_life() never Shawn> generates the result string. The causes the default (terse) error Shawn> message to be returned to the user, with no indication of what the real Shawn> problem is: [...] To clarify, is this a regression from prior behavior? From my reading of the code, it does not appear to be, though I would welcome evidence to the contrary. ---Tom