[krbdev.mit.edu #7532] still not ready for kvnos over 255

Benjamin Kaduk via RT rt-comment at krbdev.mit.edu
Fri Jan 4 20:56:32 EST 2013


[kaduk at MIT.EDU - Fri Jan  4 20:30:46 2013]:

> kadmin's ktadd, klist -k, and ktutil wrap the displayed kvno at 8
> bits.  kadmin's getprinc shows
> the correct value.
> 
> For extra fun, kadmin ktremove old picks the wrong entry of the
> "current kvno" to remove, at
> least sometimes.

I guess at least some of this is because the on-disk format stores the kvno in a krb5_octet.


More information about the krb5-bugs mailing list