[krbdev.mit.edu #1415] subkeys fubar

Sam Hartman via RT rt-comment at krbdev.mit.edu
Sun Apr 20 00:59:11 EDT 2003


>>>>> "Tom" == Tom Yu via RT <rt-comment at krbdev.mit.edu> writes:


    Tom> If we change client code to additionally smash the local
    Tom> subkey if it receives a subkey from the server, then the
    Tom> semantic of "server subkey wins" will be accomplished.  This
    Tom> change to the client code won't break against servers with
    Tom> the old behavior of merely sending back in the AP-REP the
    Tom> client subkey as received in the AP-REQ.

I think this is probably wrong to do though.  I think this discussion
is best handled in person than through the bug system.



More information about the krb5-bugs mailing list