windows-do-not-discard-badtickets-20080218
authorJeffrey Altman <jaltman@secure-endpoints.com>
Mon, 18 Feb 2008 17:33:45 +0000 (17:33 +0000)
committerJeffrey Altman <jaltman@secure-endpoints.com>
Mon, 18 Feb 2008 17:33:45 +0000 (17:33 +0000)
commit7a290f39ec303cb3473f63f7d9c634e767191279
tree08b13941d8e43908e5c2adc3a140095024229e4b
parent5fd85f53f26ba1f0649b8a8c68d3abb1c5159eb9
windows-do-not-discard-badtickets-20080218

LICENSE MIT

The RXKADBADTICKET error is returned when a krb5 derived token is sent
to a server that does not support them.  In a mixed cell it is possible
that some servers were not updated.  Discarding the token does not make
it possible to perform the request successfully and adversely affects
the user experience because those servers that do support the token
can no longer be accessed in an authenticated manner.  Users can't
determine what the cause is, all they see are their tokens disappearing
and there is nothing they can do about it anyway.

From now on return STATUS_NO_KERB_KEY and do not retry.
src/WINNT/afsd/cm_conn.c
src/WINNT/afsd/smb.c