[15912] in Kerberos-V5-bugs
[krbdev.mit.edu #8642] git commit
daemon@ATHENA.MIT.EDU (Greg Hudson via RT)
Mon Mar 19 20:01:45 2018
Mail-followup-to: rt@krbdev.mit.edu
mail-copies-to: never
From: "Greg Hudson via RT" <rt-comment@KRBDEV-PROD-APP-1.mit.edu>
In-Reply-To: <rt-8642@krbdev.mit.edu>
Message-ID: <rt-8642-48322.13.4329542432194@krbdev.mit.edu>
To: "'AdminCc of krbdev.mit.edu Ticket #8642'":;
Date: Mon, 19 Mar 2018 20:01:24 -0400 (EDT)
Reply-To: rt-comment@KRBDEV-PROD-APP-1.mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu
Omit AS-REP etype-info for replaced reply keys
etype-info in AS-REP is currently only useful when no
pre-authentication took place. Don't send it if a preauth mech
replaced the reply key, as we can't send something consistently
meaningful (the enctype must match the replaced reply key per RFC
4120, but the salt from the client key data corresponds to the initial
reply key).
https://github.com/krb5/krb5/commit/9dadcd682c1a9c47bbea8182d82faa89ede3daaf
Author: Greg Hudson <ghudson@mit.edu>
Commit: 9dadcd682c1a9c47bbea8182d82faa89ede3daaf
Branch: master
src/kdc/kdc_preauth.c | 51 ++++++++++++++++++++++++++++++++----------------
1 files changed, 34 insertions(+), 17 deletions(-)
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
