[1421] in Kerberos-V5-bugs

home help back first fref pref prev next nref lref last post

Re: Kerberos 5 beta 5 patches

daemon@ATHENA.MIT.EDU (John Studarus)
Thu May 18 13:23:52 1995

From: studarus@zippy.psc.edu (John Studarus)
To: boone@prep.net (Jon 'Iain' Boone)
Date: Thu, 18 May 1995 13:13:15 -0400 (EDT)
Cc: kerberos@MIT.EDU, krb5-bugs@MIT.EDU
In-Reply-To: <gjiq50Bz00011hks8W@prep.net> from "Jon 'Iain' Boone" at May 18, 95 11:01:20 am

> ------------------------------------------------------
>  I have tried using sclient/sserver -- I get 
>      sclient: Software caused connection abort while using sendauth
> from both platforms.

	I noticed this same problem on an Ultrix 4.3 machine.  I
tracked the problem down to a line in src/lib/crypto/des_crc.c.  This
is code run by sserver (not sclient):

des_crc.c - line 163:
    if (memcmp((char *)contents_get, (char *)contents_prd, CRC32_CKSUM_LENGTH) )
        return KRB5KRB_AP_ERR_BAD_INTEGRITY;

	sserver is returning this error value to sclient.  However I did
get sclient and sserver to run by running sserver by hand (as opposed
to running it from inetd).
	i.e.:

	sserver_machine% sserver 15000
	
	sclient_machine% sclient sserver_machine 15000

	This worked fine.  rlogin works fine from inetd.

	I suggest you get the patches from:

ftp://achilles.ctd.anl.gov/pub/kerberos.v5/k55.cdiff.950508
	
	It might solve some additional problems.

		-John

-- 
John Studarus
studarus@PSC.EDU	(aka studarus+@CMU.EDU)
Carnegie Mellon University - M.S. Student, Information Networking Institute
Pittsburgh Supercomputing Center - Network Engineer


home help back first fref pref prev next nref lref last post