[1102] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Re: Current k5 problems...

daemon@ATHENA.MIT.EDU (Mark Eichin)
Fri May 3 19:47:43 1996

To: "Richard Basch" <basch@lehman.com>
Cc: krbdev@MIT.EDU
From: Mark Eichin <eichin@MIT.EDU>
Date: 03 May 1996 19:46:49 -0400
In-Reply-To: "Richard Basch"'s message of Fri, 3 May 1996 11:55:14 -0400


>	kludged it by doing a sleep() in their code.  I fixed it by hacking
>	the KDC to always return an "authtime", instead of leaving it
>	empty in the optional ASN.1 encoding.  (Someone needs to look

It turns out that the empty authtime checking didn't actually work --
it was looking for the wrong optional tag (6 vs. 7)... Ken is merging
in the fix, that'll probably take care of it. (I caught it by
implementing ticket validation, and the kdc was *always* seeing the
authtime, never the starttime...)

home help back first fref pref prev next nref lref last post