[6295] in Kerberos
Re: preauthentication in K5B5?
daemon@ATHENA.MIT.EDU (Richard Basch)
Thu Nov 30 12:07:43 1995
Date: Thu, 30 Nov 1995 11:54:03 -0500
To: Doug Engert <DEEngert@anl.gov>
Cc: "Rita Bettenhausen" <Rita.Bettenhausen@quickmail.llnl.gov>,
"kerberos" <kerberos@MIT.EDU>
In-Reply-To: <199511301516.JAA17420@stafford.ctd.anl.gov>
From: "Richard Basch" <basch@lehman.com>
Preauthentication works in the latest code, which will be in Beta 6.
Actually, multiple encryption types mostly work too, and I have just
included Triple-DES support. There are some additional changes that
need to be done to accomodate multiple encryption type selection from
the application.
-Richard
On Thu, 30-November-1995, "Doug Engert" wrote to "Rita Bettenhausen, kerberos" saying:
> Rita Bettenhausen writes:
> >
> > K5B5 kinit is not doing preauthentication. Was preauthentication in an
> > earlier K5 version? Is there a patch to get preauthentication?
> >
> > Rita Bettenhausen
> > bettenhausen1@llnl.gov
> >
>
> Rita,
>
> Looking at the K5 beta 5 code, shows that the call to
> krb5_obtain_padata in krb5/krb/get_in_tkt.c at line 145 has been
> commented out. The comment at line 122 says it is not supported. This
> might be a perfect opertunity to get it working. Also looking at the
> kinit.c shows two krb5_preauthtype types, preauth = NULL and
> preauth_list[2] which is never used.
>
> Douglas E. Engert
> Systems Programming
> Argonne National Laboratory
> 9700 South Cass Avenue
> Argonne, Illinois 60439
> (708) 252-5444
>
> Internet: DEEngert@anl.gov
--
Richard Basch URL: http://web.mit.edu/basch/www/home.html
Lehman Brothers, Inc. Email: basch@lehman.com, basch@mit.edu
101 Hudson St., 33rd Floor Fax: +1-201-524-5828
Jersey City, NJ 07302-3988 Voice: +1-201-524-5049
