[2621] in Kerberos-V5-bugs
krb5-kdc/332: kdc dies when asked for service tickets with no v4 salts
daemon@ATHENA.MIT.EDU (jgm@portolacomm.com)
Sun Jan 5 18:31:09 1997
Resent-From: gnats@rt-11.MIT.EDU (GNATS Management)
Resent-To: krb5-unassigned@RT-11.MIT.EDU
Resent-Reply-To: krb5-bugs@MIT.EDU, jgm@portolacomm.com
Date: Sun, 5 Jan 1997 15:31:16 -0800
From: jgm@portolacomm.com
To: krb5-bugs@MIT.EDU
>Number: 332
>Category: krb5-kdc
>Synopsis: kdc dies when asked for service tickets with no v4 salts
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: krb5-unassigned
>State: open
>Class: sw-bug
>Submitter-Id: unknown
>Arrival-Date: Sun Jan 05 18:31:01 EST 1997
>Last-Modified:
>Originator: John Gardiner Myers
>Organization:
>Release: 1.0
>Environment:
System: Linux trailmix.portolacomm.com 2.0.18 #2 Wed Nov 13 17:07:58 PST 1996 i586
Architecture: i586
>Description:
When asked for a v4 service ticket for a service that has no
v4-salted keys, the server dies.
This bug was introduced by a patch I had submitted earlier.
Soon after supplying the patch, I had reported that the
patch was flawed and should not be applied. Nevertheless, my
patch got integrated in version 1.0.
The part about the server dying when there is no V4-compatible key
is new in 1.0, and should probably be investigated separately.
>How-To-Repeat:
Create a service with a non-v4-compatible-key. Make a v4 appl
request for a ticket for that service.
>Fix:
First, either remove the patch I submitted earlier, or apply the
following patch. I have not investigated why the server dies.
*** kerberos_v4.c 1996/12/13 23:52:52 1.3
--- kerberos_v4.c 1997/01/05 23:04:38
***************
*** 403,408 ****
--- 403,414 ----
ENCTYPE_DES_CBC_CRC,
KRB5_KDB_SALTTYPE_AFS3,
-1,
+ &pkey) &&
+ krb5_dbe_find_enctype(kdc_context,
+ &entries,
+ ENCTYPE_DES_CBC_CRC,
+ -1,
+ -1,
&pkey))
{
lt = klog(L_KRB_PERR, "KDC V4: principal %s.%s isn't V4 compatible",
>Audit-Trail:
>Unformatted:
