Re: Bug in 1.5.1 KDC is session key selection
Andreas Haupt <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.heimdal.general |
|---|---|
| Organization | DESY |
| Message-ID | <[email protected]> |
Hi there, any news on this bug? Thanks, Andreas On Mon, 2011-10-17 at 09:21 -0500, Nico Williams wrote: > On Mon, Oct 17, 2011 at 4:02 AM, Andreas Haupt <[email protected]> wrote: > > On Fri, 2011-10-14 at 12:38 +0000, Love Hörnquist Åstrand wrote: > >> > The bug exists only in the AS-REQ processing and not the TGS-REQ > >> > processing. The TGS-REQ is properly restricting the possible enc-type list. > >> > >> Correct, the issue is that when getting a non krbtgt with AS-REQ, the TGS method of selecting session key should be used. > > > > Is this fixed with > > > > https://github.com/heimdal/heimdal/commit/12cd2c9cbd1ca027a3ef9ac7ab3e79526b1348ae > > > > & > > > > https://github.com/heimdal/heimdal/commit/4c6976a6bdf8a76c6f3c650ae970d46c931e5c71 > > > > ? From the commit explanation it is not completely clear to me as the > > patch is supposed to fix even another problem ... > > No, those fix a problem in the TGS side. It's oddly similar though. > The problem in the AS path is with non-TGTs, while the problem on the > TGS side is with TGTs (and mixed MIT/Heimdal realms). > > Nico > -- -- | Andreas Haupt | E-Mail: [email protected] | DESY Zeuthen | WWW: http://www-zeuthen.desy.de/~ahaupt | Platanenallee 6 | Phone: +49/33762/7-7359 | D-15738 Zeuthen | Fax: +49/33762/7-7216