[16508] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Updating ccache config data to be more Java friendly

daemon@ATHENA.MIT.EDU (Sam Hartman)
Tue Nov 23 06:47:35 2010

From: Sam Hartman <hartmans@mit.edu>
To: Frank Cusack <frank+krb@linetwo.net>
Date: Tue, 23 Nov 2010 06:47:21 -0500
In-Reply-To: <6A19164F79638D6EB0857AD6@cusack.local> (Frank Cusack's message
	of "Mon, 22 Nov 2010 20:19:05 -0800")
Message-ID: <tslpqtw8do6.fsf_-_@carter-zimmerman.suchdamage.org>
MIME-Version: 1.0
Cc: Weijun Wang <weijun.wang@oracle.com>, krbdev@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu

>>>>> "Frank" == Frank Cusack <frank+krb@linetwo.net> writes:

    Frank> On 11/19/10 12:52 AM -0500 Greg Hudson wrote:
    >> On Thu, 2010-11-18 at 22:18 -0500, Weijun Wang wrote:
>> Java 1.6 currently just reads all entries as normal credential
    >> cache. It
    >>> fails on the new type of entry when trying to interpret the last
    >>> 2 fields as ticket and second ticket. For the new entry, the
    >>> field used to be the ticket is a 3-bytes sequence which is not a
    >>> DER encoding at all.
    >> 
    >> I see.  In hindsight, we perhaps should have made the config
    >> entries preserve the Ticket ASN.1 structure of the ticket field.
    >> But that ship has sailed.

    Frank> Well why couldn't you just update the code that writes the
    Frank> entries?  Of course you'd have to read either format but you
    Frank> could remove the "bad" encoding reader after a year.

If we can get Heimdal to go along with this change I'd support making
it.  I do not have cycles to implement.

--Sam
_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

home help back first fref pref prev next nref lref last post