[33253] in Kerberos

home help back first fref pref prev next nref lref last post

Re: Kerberos fails with Windows Server 2008 R2 RODC - assistance

daemon@ATHENA.MIT.EDU (Greg Hudson)
Mon Mar 7 13:59:02 2011

From: Greg Hudson <ghudson@mit.edu>
To: Jonathan Thorpe <jthorpe@conexim.com.au>
In-Reply-To: <98518DB27649AF4EAFB2E355F71E605010BE3F22@ISRV-EXCH-1.conexim.local>
Date: Mon, 07 Mar 2011 11:46:22 -0500
Message-ID: <1299516382.2397.380.camel@t410>
Mime-Version: 1.0
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

On Fri, 2011-03-04 at 02:58 -0500, Jonathan Thorpe wrote:
> Looking at how dramatically different the 1.6 and 1.9 branches are,
> I'm not confident enough to backport this patch myself, however  I was
> hoping someone might be able to help with a patch for the 1.6 releases
> that Debian is currently shipping?

Untested:

Index: get_in_tkt.c
===================================================================
--- get_in_tkt.c	(revision 23380)
+++ get_in_tkt.c	(working copy)
@@ -1020,6 +1020,7 @@
 					   request.client->realm.data,
 					   0)))
 	    goto cleanup;
+	request.server->type = KRB5_NT_SRV_INST;
     }
 
     krb5_preauth_request_context_init(context);

This doesn't handle the case where the caller specifies an
in_tkt_service of "krbtgt/something", but that case is rare.


________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post