Fix: Incorrect auth error message

There is a small bug in the server code that processes
the user-locked situation: while kinit reports `kinit:
Client's credentials have been revoked ...`, the code
expects `kinit: Clients credentials have been revoked ...`
(doesn't contain the apostrophe). By correcting the
message and adding the apostrophe the right message
should be displayed.

Fixes: https://pagure.io/freeipa/issue/9891
Signed-off-by: Carla Martinez <carlmart@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>
This commit is contained in:
Carla Martinez authored and Florence Blanc-Renaud committed 2025-12-09 20:53:28 +01:00
1 parent c03f7eb2b9
commit f39acce911
1 file changed
+1 -1
+1 -1
View File
@@ -1148,7 +1148,7 @@ class login_password(Backend, KerberosSession):
' has expired while getting initial credentials') in str(e):
raise KrbPrincipalExpired(principal=principal,
message=unicode(e))
elif ('kinit: Clients credentials have been revoked '
elif ('kinit: Client\'s credentials have been revoked '
'while getting initial credentials') in str(e):
raise UserLocked(principal=principal,
message=unicode(e))