[617] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

Re: replay caches for safe/priv messages

jtkohl@ATHENA.MIT.EDU (jtkohl@ATHENA.MIT.EDU)
Mon Feb 25 16:13:48 1991

this does in fact seem to be sufficient, assuming the caller arranges that the
sender_addr passed in is of an ADDRTYPE_ADDRPORT, which can be generated
with libos/krb5_gen_portaddr() (see the updated API doc for details)

I'm also mucking with rd_safe/rd_priv; they will require a rcache (which
may be shared with the ap_req rcache) in order to accept messages with
timestamps and not sequence numbers.


home help back first fref pref prev next nref lref last post