132 // mandatory on some cases (see Krb5.TKT_OPTS_ENC_PA_REP check above). |
132 // mandatory on some cases (see Krb5.TKT_OPTS_ENC_PA_REP check above). |
133 if (rep.encKDCRepPart.flags.get(Krb5.TKT_OPTS_ENC_PA_REP)) { |
133 if (rep.encKDCRepPart.flags.get(Krb5.TKT_OPTS_ENC_PA_REP)) { |
134 boolean reqPaReqEncPaRep = false; |
134 boolean reqPaReqEncPaRep = false; |
135 boolean repPaReqEncPaRepValid = false; |
135 boolean repPaReqEncPaRepValid = false; |
136 |
136 |
137 for (PAData pa : req.pAData) { |
137 if (req.pAData != null) { |
138 if (pa.getType() == Krb5.PA_REQ_ENC_PA_REP) { |
138 for (PAData pa : req.pAData) { |
139 // The KDC supports RFC 6806 and ENC-PA-REP was sent in |
139 if (pa.getType() == Krb5.PA_REQ_ENC_PA_REP) { |
140 // the request (AS-REQ). A valid checksum is now required. |
140 // The KDC supports RFC 6806 and ENC-PA-REP was sent in |
141 reqPaReqEncPaRep = true; |
141 // the request (AS-REQ). A valid checksum is now required. |
142 break; |
142 reqPaReqEncPaRep = true; |
|
143 break; |
|
144 } |
143 } |
145 } |
144 } |
146 } |
145 |
147 |
146 if (rep.encKDCRepPart.pAData != null) { |
148 if (rep.encKDCRepPart.pAData != null) { |
147 for (PAData pa : rep.encKDCRepPart.pAData) { |
149 for (PAData pa : rep.encKDCRepPart.pAData) { |