IPA/KRB5: handle KRB5_PROG_ETYPE_NOSUPP during IPA passowrd

[Sumit Bose]

Hi,

with MIT Kerberos 1.11 and above kinit for migrated IPA users without
Kerberos keys returns KRB5_PROG_ETYPE_NOSUPP. This patch adds it to the
list of codes which trigger the IPA password migration.

bye,
Sumit

[Jakub Hrozek]

On Tue, Mar 11, 2014 at 04:24:08PM +0100, Sumit Bose wrote:
> Hi,
>
> with MIT Kerberos 1.11 and above kinit for migrated IPA users without
> Kerberos keys returns KRB5_PROG_ETYPE_NOSUPP. This patch adds it to the
> list of codes which trigger the IPA password migration.
>
> bye,
> Sumit

ACK

I haven't tested the migration per se, I trust Sumit's testing here. But
normal krb5_child operation works fine and the patch looks good.

[Jakub Hrozek]

On Wed, Mar 12, 2014 at 02:05:19PM +0100, Jakub Hrozek wrote:
> On Tue, Mar 11, 2014 at 04:24:08PM +0100, Sumit Bose wrote:
> > Hi,
> >
> > with MIT Kerberos 1.11 and above kinit for migrated IPA users without
> > Kerberos keys returns KRB5_PROG_ETYPE_NOSUPP. This patch adds it to the
> > list of codes which trigger the IPA password migration.
> >
> > bye,
> > Sumit
>
> ACK
>
> I haven't tested the migration per se, I trust Sumit's testing here. But
> normal krb5_child operation works fine and the patch looks good.

Pushed to master and sssd-1-11