[krbdev.mit.edu #7571] SVN Commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Tue Feb 19 12:12:54 EST 2013


Allow multi-hop SAM-2 exchanges

Prior to 1.11, it was possible to do SAM-2 preauth exchanges with
multiple hops by sending repeated preauth-required errors with
different challenges (which is not the way multi-hop exchanges are
described in RFC 6113, but it can still work).  This stopped working
when SAM-2 was converted to a built-in module.  Make it work again.

https://github.com/krb5/krb5/commit/f20a77e879d203cdcb1bdbf9dc8e604a5187c88f
Author: Greg Hudson <ghudson at mit.edu>
Commit: f20a77e879d203cdcb1bdbf9dc8e604a5187c88f
Branch: master
 src/lib/krb5/krb/preauth2.c |    5 +++++
 1 files changed, 5 insertions(+), 0 deletions(-)



More information about the krb5-bugs mailing list