[11387] in Kerberos-V5-bugs

home help back first fref pref prev next nref lref last post

[krbdev.mit.edu #6656] SVN Commit

daemon@ATHENA.MIT.EDU (Sam Hartman via RT)
Tue Feb 9 14:15:11 2010

Mail-followup-to: rt@krbdev.mit.edu
mail-copies-to: never
From: "Sam Hartman via RT" <rt-comment@krbdev.MIT.EDU>
In-Reply-To: <rt-6656@krbdev.mit.edu>
Message-ID: <rt-6656-32421.0.319749667144364@krbdev.mit.edu>
To: "'AdminCc of krbdev.mit.edu Ticket #6656'":;"'AdminCc of krbdev.mit.edu Ticket #6656'":;@MIT.EDU
Date: Tue,  9 Feb 2010 14:15:08 -0500 (EST)
Reply-To: rt-comment@krbdev.MIT.EDU
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu


There are two issues with return_enc_padata.
1)  It often will return an empty sequence of enc_padata rather than not including the field
2) FAST negotiation is double supported in the referral tgs path and not supported in the non-referral path

Rewrite the return_enc_padata logic to:

* Split  out referral interactions with kdb into its own function
* Use add_pa_data_element

http://src.mit.edu/fisheye/changelog/krb5/?cs=23712
Commit By: hartmans
Revision: 23712
Changed Files:
U   trunk/src/kdc/do_as_req.c
U   trunk/src/kdc/do_tgs_req.c
U   trunk/src/kdc/kdc_preauth.c
U   trunk/src/kdc/kdc_util.c
U   trunk/src/kdc/kdc_util.h

_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs

home help back first fref pref prev next nref lref last post