Re: Bug in 1.5.1 KDC is session key selection
Nico Williams <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.heimdal.general |
|---|---|
| Message-ID | <CAK3OfOgpV9iSuevtgg1FvgHC3aGqdRUUGGjbkgEMEiv1sncQ0A@mail.gmail.com> |
On Mon, Oct 17, 2011 at 4:02 AM, Andreas Haupt <[email protected]> wrote: > On Fri, 2011-10-14 at 12:38 +0000, Love Hörnquist Åstrand wrote: >> > The bug exists only in the AS-REQ processing and not the TGS-REQ >> > processing. The TGS-REQ is properly restricting the possible enc-type list. >> >> Correct, the issue is that when getting a non krbtgt with AS-REQ, the TGS method of selecting session key should be used. > > Is this fixed with > > https://github.com/heimdal/heimdal/commit/12cd2c9cbd1ca027a3ef9ac7ab3e79526b1348ae > > & > > https://github.com/heimdal/heimdal/commit/4c6976a6bdf8a76c6f3c650ae970d46c931e5c71 > > ? From the commit explanation it is not completely clear to me as the > patch is supposed to fix even another problem ... No, those fix a problem in the TGS side. It's oddly similar though. The problem in the AS path is with non-TGTs, while the problem on the TGS side is with TGTs (and mixed MIT/Heimdal realms). Nico --