[14140] in Athena Bugs

home help back first fref pref prev next nref lref last post

Re: telnetd patch to audit

daemon@ATHENA.MIT.EDU (ghudson@MIT.EDU)
Mon Jan 29 12:07:38 1996

From: ghudson@MIT.EDU
Date: Mon, 29 Jan 1996 12:07:35 -0500
To: brlewis@MIT.EDU
Cc: bugs@MIT.EDU, "Daniel G. Pouzzner" <douzzer@prez.mit.edu>
In-Reply-To: "[13766] in Athena Bugs"

> The failure message given is
> 	Can't decode authenticator (krb_rd_req)
> It should be
> 	Incorrect network address (krb_rd_req)

As I discussed with Bruce in person, this is because the original
krb_rd_req() will fail with RD_AP_BADD, but the dialup hack will cause
the error code to become RD_AP_UNDEC.  The fix is to check for (r ==
RD_AP_UNDEC) instead of just "if (r)".

It is not clear to me that using a library global variable is
preferrable to calling getpeername() on file descriptor 0 in
kerberos4_is(), but I will leave that up to Bruce.


home help back first fref pref prev next nref lref last post