[2423] in Kerberos_V5_Development
Re: Kerberos V4 Re-entrancy Question and a Solaris threaded server.
daemon@ATHENA.MIT.EDU (Marc Horowitz)
Wed Jul 9 22:23:44 1997
To: Clifford Neuman <bcn@ISI.EDU>
Cc: epeisach@MIT.EDU, jdj@busstop.jpl.nasa.gov, krbdev@MIT.EDU, tytso@MIT.EDU
From: Marc Horowitz <marc@cygnus.com>
Date: 09 Jul 1997 22:23:10 -0400
In-Reply-To: Clifford Neuman's message of Wed, 9 Jul 1997 18:27:33 -0700
Clifford Neuman <bcn@ISI.EDU> writes:
>> I don't know the implementation details of the replay cache offhand,
>> but it is possible that the verification of authentication was being
>> done in the main process before forking so that updates to the replay
>> cache are effective across all invocations.
krb4 doesn't have a replay cache, so this can't be a problem.
I concur with ezra's evaluation.
Marc