[617] in Kerberos_V5_Development
Re: replay caches for safe/priv messages
jtkohl@ATHENA.MIT.EDU (jtkohl@ATHENA.MIT.EDU)
Mon Feb 25 16:13:48 1991
this does in fact seem to be sufficient, assuming the caller arranges that the
sender_addr passed in is of an ADDRTYPE_ADDRPORT, which can be generated
with libos/krb5_gen_portaddr() (see the updated API doc for details)
I'm also mucking with rd_safe/rd_priv; they will require a rcache (which
may be shared with the ap_req rcache) in order to accept messages with
timestamps and not sequence numbers.