| commit | 0b6eaff49a62492cfb8a9c5d1eca701c169fd07f | [log] [tgz] |
|---|---|---|
| author | emmanuel lecharny <elecharny@apache.org> | Thu Jun 06 16:18:30 2019 +0200 |
| committer | emmanuel lecharny <elecharny@apache.org> | Thu Jun 06 16:18:30 2019 +0200 |
| tree | 1bde46bb60fa24fadf9dccbab3a8d9ce0ed49554 | |
| parent | 8e459bc62819394aa7d2e304143d9ea8e780b95f [diff] |
Patch from DIRSERVER-2070 (provided by Alexender Bersenev) applied.
diff --git a/protocol-kerberos/src/main/java/org/apache/directory/server/kerberos/changepwd/service/ChangePasswordService.java b/protocol-kerberos/src/main/java/org/apache/directory/server/kerberos/changepwd/service/ChangePasswordService.java index b6667cd..93a672a 100644 --- a/protocol-kerberos/src/main/java/org/apache/directory/server/kerberos/changepwd/service/ChangePasswordService.java +++ b/protocol-kerberos/src/main/java/org/apache/directory/server/kerberos/changepwd/service/ChangePasswordService.java
@@ -254,7 +254,7 @@ byte[] decryptedData = cipherTextHandler.decrypt( subSessionKey, encReqPrivPart, KeyUsage.KRB_PRIV_ENC_PART_CHOSEN_KEY ); EncKrbPrivPart privatePart = KerberosDecoder.decodeEncKrbPrivPart( decryptedData ); - if ( authenticator.getSeqNumber() != privatePart.getSeqNumber() ) + if ( ( authenticator.getSeqNumber() != null ) && ( authenticator.getSeqNumber() != privatePart.getSeqNumber() ) ) { throw new ChangePasswordException( ChangePasswdErrorType.KRB5_KPASSWD_MALFORMED ); }