[11872] in Kerberos-V5-bugs
[krbdev.mit.edu #6854] SVN Commit
daemon@ATHENA.MIT.EDU (Greg Hudson via RT)
Mon Jan 31 20:11:57 2011
Mail-followup-to: rt@krbdev.mit.edu
mail-copies-to: never
From: "Greg Hudson via RT" <rt-comment@krbdev.MIT.EDU>
In-Reply-To: <rt-6854@krbdev.mit.edu>
Message-ID: <rt-6854-33715.9.01896974614168@krbdev.mit.edu>
To: "'AdminCc of krbdev.mit.edu Ticket #6854'":;"'AdminCc of krbdev.mit.edu Ticket #6854'":;@MIT.EDU
Date: Mon, 31 Jan 2011 20:11:52 -0500 (EST)
Reply-To: rt-comment@krbdev.MIT.EDU
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu
Because of 8-bit wraparound, keytabs can contain entries with kvno 0.
Because 0 is a distinguished kvno value for krb5_kt_get_entry(),
kadmin's remove_principal() winds up substituting the specified kvno
with the highest-numbered kvno of the specified principal in the
keytab. Make sure not to perform this substitution when in
specified-kvno mode.
(This fix leaves behind a very minor bug where "ktrem principal 0"
returns silently, instead of producing an error message like it
normally would, if principal exists in the keytab but not at kvno 0.)
http://src.mit.edu/fisheye/changelog/krb5/?cs=24611
Commit By: ghudson
Revision: 24611
Changed Files:
U trunk/src/kadmin/cli/keytab.c
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
