[15527] in Kerberos_V5_Development
Re: krb5-1.8-beta1 is available
daemon@ATHENA.MIT.EDU (Greg Hudson)
Wed Feb 24 23:27:35 2010
From: Greg Hudson <ghudson@mit.edu>
To: Marcus Watts <mdw@umich.edu>
In-Reply-To: <E1NkROi-0000Ci-6w@bruson.ifs.umich.edu>
Date: Wed, 24 Feb 2010 23:27:29 -0500
Message-ID: <1267072049.20257.641.camel@ray>
Mime-Version: 1.0
Cc: "krbdev@mit.edu" <krbdev@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On Wed, 2010-02-24 at 19:16 -0500, Marcus Watts wrote:
> I'll look at my logic more carefully this evening. I don't see anything
> above that looks immediately obviously wrong to me. I assume the last
> few decoded bits are AD-SIGNEDPATH...?
Yes, although AD-SIGNTICKET might be the correct name now that I look
(the constants in the code are a little confusing; the data structure is
called krb5_ad_signedpath and the key usage constant is similar, but the
authdata constant is KRB5_AUTHDATA_SIGNTICKET).
The integer at offset 155 stands for AD-IF-RELEVANT; the integer at
offset 6 of the AD-IF-RELEVANT blob stands for AD-SIGNTICKET; and the
blob itself is an enctype (aes256-cts) and a checksum of cksumtype
hmac-sha1-aes256.
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
