[11575] in Kerberos-V5-bugs
[krbdev.mit.edu #6739] SVN Commit
daemon@ATHENA.MIT.EDU (Tom Yu via RT)
Thu Jun 10 17:14:31 2010
Mail-followup-to: rt@krbdev.mit.edu
mail-copies-to: never
From: "Tom Yu via RT" <rt-comment@krbdev.MIT.EDU>
In-Reply-To: <rt-6739@krbdev.mit.edu>
Message-ID: <rt-6739-32933.18.4682042392185@krbdev.mit.edu>
To: "'AdminCc of krbdev.mit.edu Ticket #6739'":;"'AdminCc of krbdev.mit.edu Ticket #6739'":;@MIT.EDU
Date: Thu, 10 Jun 2010 17:14:28 -0400 (EDT)
Reply-To: rt-comment@krbdev.MIT.EDU
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu
pull up r24120, r24121 from trunk
------------------------------------------------------------------------
r24120 | ghudson | 2010-06-08 12:14:24 -0400 (Tue, 08 Jun 2010) | 12 lines
ticket: 6739
target_version: 1.8.2
tags: pullup
Stop checking the current time against the context expiration time in
the message wrap/unwrap functions in the krb5 GSS mech. Heimdal
doesn't do it, and it generally results in poor app behavior when a
ticket expires. In exchange, it doesn't provide much security benefit
since it's not enforced across the board--for example, ssh sessions
can persist beyond ticket expiration time since they don't use GSS to
wrap payload data.
http://src.mit.edu/fisheye/changelog/krb5/?cs=24130
Commit By: tlyu
Revision: 24130
Changed Files:
U branches/krb5-1-8/src/lib/gssapi/krb5/k5seal.c
U branches/krb5-1-8/src/lib/gssapi/krb5/k5sealiov.c
U branches/krb5-1-8/src/lib/gssapi/krb5/k5unseal.c
U branches/krb5-1-8/src/lib/gssapi/krb5/k5unsealiov.c
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
