Re: Bug in 1.5.1 KDC is session key selection
Andreas Haupt <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.heimdal.general |
|---|---|
| Organization | DESY |
| Message-ID | <[email protected]> |
Hi Love, On Fri, 2011-10-14 at 12:38 +0000, Love Hörnquist Åstrand wrote: > > The bug exists only in the AS-REQ processing and not the TGS-REQ > > processing. The TGS-REQ is properly restricting the possible enc-type list. > > Correct, the issue is that when getting a non krbtgt with AS-REQ, the TGS method of selecting session key should be used. Is this fixed with https://github.com/heimdal/heimdal/commit/12cd2c9cbd1ca027a3ef9ac7ab3e79526b1348ae & https://github.com/heimdal/heimdal/commit/4c6976a6bdf8a76c6f3c650ae970d46c931e5c71 ? From the commit explanation it is not completely clear to me as the patch is supposed to fix even another problem ... Cheers & Thanks, Andreas -- | Andreas Haupt | E-Mail: [email protected] | DESY Zeuthen | WWW: http://www-zeuthen.desy.de/~ahaupt | Platanenallee 6 | Phone: +49/33762/7-7359 | D-15738 Zeuthen | Fax: +49/33762/7-7216