Ticket Viewer.app shows incorrect error message when no KDCs contactable

Originator:sigmaris
Number:rdar://17711122 Date Originated:2014-07-17
Status:Open Resolved:
Product:Mac OS X Product Version:10.9.4
Classification: Reproducible:Yes
 
Summary:
When trying to obtain a Kerberos ticket-granting ticket (TGT, or initial ticket) in Ticket Viewer, if no KDCs for the Keberos realm are contactable, Ticket Viewer will show an error dialog saying "Incorrect Password". That message is extremely misleading for the user, as the actual error has nothing to do with the (in)correctness of their password.

Steps to Reproduce:
1. Add a Kerberos identity to Ticket Viewer.
2. Make sure all KDCs for the realm for the given identity are not reachable, for example by disconnecting the Mac from the internet.
3. Delete any cached Kerberos ticket for the identity, then try to obtain a TGT by clicking on the refresh button.

Expected Results:
If no KDCs are reachable, I'd expect an error message to appear informing the user of that problem.

Actual Results:
An error dialog appears with the text "Incorrect Password".

In Console, the real error is logged:

17/07/2014 15:54:31.899 Ticket Viewer[437]: set-error: -1765328228: unable to reach any KDC in realm EXAMPLE.ORG, tried 2 KDCs


Version:
Mac OS X 10.9.4/13E28

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!