[4416] in Kerberos
kadmin specifies KRB5_PADATA_ENC_TIMESTAMP
daemon@ATHENA.MIT.EDU (Jim Miller)
Mon Jan 2 18:19:30 1995
From: jim@bilbo.suite.com (Jim Miller)
Date: Mon, 2 Jan 95 17:11:08 -0600
To: krb5-bugs@MIT.EDU
Cc: kerberos@MIT.EDU
Reply-To: Jim_Miller@suite.com
This bug report is for KRB5, beta 4, patchlevel 3.
The "preauth_search_list" array declared at the beginning of kadmin.c
specifies the preauth type of KRB5_PADATA_ENC_TIMESTAMP. However, this
preauth type is no longer listed in the "preauth_systems" array defined in
preauth.c. It looks like KRB5_PADATA_ENC_TIMESTAMP was supposed to be
replaced with KRB5_PADATA_ENC_UNIX_TIME.
This bug doesn't cause any immediate problems because out-of-the-box
kadmin doesn't actually do any preauthentication.
A quick grep shows that ksu and kpasswd also specify
KRB5_PADATA_ENC_TIMESTAMP.
Solution: Not sure, because I don't know why beta 4 switched to
ENC_UNIX_TIME. My guess is that all occurrences of ENC_TIMESTAMP should
be changed to ENC_UNIX_TIME.
Jim_Miller@suite.com
