dist/kdc/kerberos5.c

1032  * determining if the server should send ETYPE_INFO2 or not.
1332  * verify the flags on `client' and `server', returning 0
1405     /* check server */
1408 	hdb_entry *server = &server_ex->entry;
1410 	if (server->flags.locked_out) {
1412 		    "Client server locked out -- %s", server_name);
1415 	if (server->flags.invalid) {
1421 	if(!server->flags.server){
1423 		    "Principal may not act as server -- %s", server_name);
1427 	if(!is_as_req && server->flags.initial) {
1429 		    "AS-REQ is required for server -- %s", server_name);
1433 	if (server->valid_start && *server->valid_start > kdc_time) {
1435 	    krb5_format_time(context, *server->valid_start,
1443 	if (server->valid_end && *server->valid_end < kdc_time) {
1445 	    krb5_format_time(context, *server->valid_end,
1453 	if (server->pw_end && *server->pw_end < kdc_time) {
1455 	    krb5_format_time(context, *server->pw_end,
1520 			hdb_entry_ex *server)
1615 	|| r->server->entry.flags.require_preauth;
1711 	_kdc_set_e_text(r, "No server in request");
1722 		"AS-REQ malformed server name from %s", from);
1803 			NULL, NULL, &r->server);
1953 			    r->server, r->server_name,
1959 	ret = _kdc_check_anon_policy(context, config, r->client, r->server);
1974 				 r->server, r->server_name,
2008     ret = copy_Realm(&r->server->entry.principal->realm, &rep.ticket.realm);
2012 				  r->server->entry.principal);
2021     if(r->client->entry.flags.forwardable && r->server->entry.flags.forwardable)
2028     if(r->client->entry.flags.proxiable && r->server->entry.flags.proxiable)
2035     if(r->client->entry.flags.postdate && r->server->entry.flags.postdate)
2076 	if(r->server->entry.max_life)
2077 	    t = start + min(t - start, *r->server->entry.max_life);
2097 	    if(r->server->entry.max_renew)
2098 		t = start + min(t - start, *r->server->entry.max_renew);
2238 				      r->server,
2280 			    &rep, &r->et, &r->ek, setype, r->server->entry.kvno,
2344     if (r->server)
2345 	_kdc_free_ent(context, r->server);