[krbdev.mit.edu #1818] 64-bit cleanliness in lib/krb4/tf_util.c

Sam Hartman via RT rt-comment at krbdev.mit.edu
Sun Sep 7 15:10:46 EDT 2003


>>>>> "nalin at redhat" == nalin at redhat com via RT <rt-comment at krbdev.mit.edu> writes:

    nalin at redhat> Hi, I've stumbled onto a 64-bit cleanliness problem
    nalin at redhat> in tf_util.c's versions of tf_get_cred() and
    nalin at redhat> tf_save_cred().  The issue date in the credential
    nalin at redhat> structure is written to and read from the file as a
    nalin at redhat> long.

Unfortunately, this is not a bug, but rather the behavior people seem
to expect.  Or at least the people with 64-bit systems don't want to
see this change because it would break existing ticket files.

The current claim is that the ticket-file format is dependent on
sizeof long and thus is dependent on the ABI of the library in
question.  If you wanted a sane authentication system you wouldn't be
using krb4.


There has been some discussion of adding support to read both formats
on all systems but I don't think code has been written.

This is a duplicate of another report with a much longer explanation
of the issue; I don't remember which report right now, but will try to
find it and link the two tickets.



More information about the krb5-bugs mailing list