Re: Bug in 1.5.1 KDC is session key selection
Love Hörnquist Åstrand <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.heimdal.general |
|---|---|
| Message-ID | <[email protected]> |
this was probably fixed by https://github.com/heimdal/heimdal/commit/c757eb7fb04a9b0ca883ddb72c1bc75bf5d814f3 Love 6 jan 2012 kl. 14:05 skrev Andreas Haupt: > Hi there, > > any news on this bug? > > Thanks, > Andreas > > On Mon, 2011-10-17 at 09:21 -0500, Nico Williams wrote: >> On Mon, Oct 17, 2011 at 4:02 AM, Andreas Haupt <[email protected]> wrote: >>> On Fri, 2011-10-14 at 12:38 +0000, Love Hörnquist Åstrand wrote: >>>>> The bug exists only in the AS-REQ processing and not the TGS-REQ >>>>> processing. The TGS-REQ is properly restricting the possible enc-type list. >>>> >>>> Correct, the issue is that when getting a non krbtgt with AS-REQ, the TGS method of selecting session key should be used. >>> >>> Is this fixed with >>> >>> https://github.com/heimdal/heimdal/commit/12cd2c9cbd1ca027a3ef9ac7ab3e79526b1348ae >>> >>> & >>> >>> https://github.com/heimdal/heimdal/commit/4c6976a6bdf8a76c6f3c650ae970d46c931e5c71 >>> >>> ? From the commit explanation it is not completely clear to me as the >>> patch is supposed to fix even another problem ... >> >> No, those fix a problem in the TGS side. It's oddly similar though. >> The problem in the AS path is with non-TGTs, while the problem on the >> TGS side is with TGTs (and mixed MIT/Heimdal realms). >> >> Nico >> -- > > -- > | Andreas Haupt | E-Mail: [email protected] > | DESY Zeuthen | WWW: http://www-zeuthen.desy.de/~ahaupt > | Platanenallee 6 | Phone: +49/33762/7-7359 > | D-15738 Zeuthen | Fax: +49/33762/7-7216 > >
smime.p7s
(application/pkcs7-signature, 4.3 KB) - not displayed