Re: Confused about verify_ap_req_nofail

[John Godehn <godehn@email.unc.edu>]

After I wrote the initial email, I looked at the MIT source and the logic
works the same way in the krb5_verify_init_creds function
(src/krb5/krb/vfy_increds.c). That is, it is ok if there is no keytab, but
if the verify_ap_req_nofail options is set, it will error out. So it seems
as though the man page is just backwards?

Thanks,

John


On 20 Aug 2002, Johan Danielsson wrote:

> John Godehn <godehn@email.unc.edu> writes:
>
> > Hello, I am confused about verify_ap_req_nofail option.
>
> Yes, the logic appears to be swapped.
>
> /Johan
>