[96] in bug-owl
libzephyr bug affecting owl users who renew tickets
daemon@ATHENA.MIT.EDU (Greg Hudson)
Sat Oct 12 21:08:34 2002
Date: Sat, 12 Oct 2002 21:08:31 -0400
Message-Id: <200210130108.VAA06513@error-messages.mit.edu>
From: Greg Hudson <ghudson@MIT.EDU>
To: bug-owl@MIT.EDU
In 1994, I introduced a bug into libzephyr such that
ZMakeAuthentication() will cache authenticators for up to 120 seconds
but won't cache session keys. Most users aren't affected because they
use a separate zwrite process for each notice the send. But owl users
may get an authentication failure for up to 120 seconds after renewing
tickets.
I will fix the libzephyr bug in the next patch release. But until
that is deployed widely, owl can work around the bug easily by calling
ZResetAuthentication() after each notice. (Please try to avoid
calling ZResetAuthentication() between recipients when there is a
single notice with multiple recipients.)
Also, I think there is an owl bug in the handling of authentication
failures; owl appears to wait forever for an ack, instead of noticing
the nack it should be getting.
