[3045] in Kerberos
Re: More K5b3 tgt forwarding ...
daemon@ATHENA.MIT.EDU (Theodore Ts'o)
Tue Mar 22 22:32:11 1994
Date: Tue, 22 Mar 94 22:19:39 EST
From: tytso@MIT.EDU (Theodore Ts'o)
To: shadow@alycia.andrew.cmu.edu
Cc: kerberos@MIT.EDU, outnews+netnews.comp.protocols.kerberos@andrew.cmu.edu
In-Reply-To: Derrick J Brashear's message of Tue, 22 Mar 94 21:42:26 EST,
<9403230242.AA02587@alycia.andrew.cmu.edu>
Date: Tue, 22 Mar 94 21:42:26 EST
From: shadow@alycia.andrew.cmu.edu (Derrick J Brashear)
After some digging, I found that the failure is happening in an isode call,
the corresponding code being:
if (val->timestamp) {
if (!(val->optionals & opt_KRB5_EncKrbPrivPart_usec)) {
/* must have usec if we have timestamp */
*error = ISODE_50_LOCAL_ERR_BADCOMBO;
goto errout;
}
which is in lib/krb5/asn.1/crep2kcrep.c
Here's the patch which should fix this problem; it's a buglet in the
encoding routine.
- Ted
*** kcrep2crep.c 1993/12/01 20:48:25 1.5
--- kcrep2crep.c 1994/03/23 03:16:43
***************
*** 72,80 ****
*error = ENOMEM;
return(0);
}
- }
-
- if (val->usec) {
retval->usec = val->usec;
retval->optionals |= opt_KRB5_EncKrbCredPart_usec;
}
--- 72,77 ----
