[2394] in Kerberos-V5-bugs
pending/149: krb5-beta7: SAM preauth broken
daemon@ATHENA.MIT.EDU (John Gardiner Myers)
Sun Nov 3 13:34:24 1996
Resent-From: gnats@rt-11.MIT.EDU (GNATS Management)
Resent-To: gnats-admin@rt-11.MIT.EDU
Resent-Reply-To: krb5-bugs@MIT.EDU, John Gardiner Myers <jgm@portolacomm.com>
Date: Sun, 3 Nov 1996 10:13:34 -0800 (PST)
From: John Gardiner Myers <jgm@portolacomm.com>
To: krb5-bugs@MIT.EDU
>Number: 149
>Category: pending
>Synopsis: krb5-beta7: SAM preauth broken
>Confidential: yes
>Severity: serious
>Priority: medium
>Responsible: gnats-admin
>State: open
>Class: sw-bug
>Submitter-Id: unknown
>Arrival-Date: Sun Nov e 13:34:01 EST 1996
>Last-Modified:
>Originator:
>Organization:
>Release:
>Environment:
>Description:
>How-To-Repeat:
>Fix:
>Audit-Trail:
>Unformatted:
Setting the "requires_prauth" field of a principal causes kinit to
fail with the message:
kinit: ASN.1 structure is missing a required field while getting initial
credentials
Stepping around in the debugger, this error is being generated by the
setup_buf_only() macro of decode_krb5_sam_challenge. This causes kinit to
crap out, even though there is another preauth type that it was able to
obtain answers for.