[krbdev.mit.edu #7715] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Mon Oct 14 23:51:24 EDT 2013


Change KRB5KDC_ERR_NO_ACCEPTABLE_KDF to 100

draft-ietf-krb-wg-pkinit-alg-agility-07 specifies
KDC_ERR_NO_ACCEPTABLE_KDF as 82, but this value conflicts with
KRB_AP_ERR_PRINCIPAL_UNKNOWN from RFC 6111.  The former value has been
reassigned to 100 to fix the conflict.  Use the correct value.

We believe that this error won't crop up in practice for a long time
(when SHA-2 has been superceded by other hash algorithms and people
are desupporting it), by which time implementations will mostly have
been upgraded to use the new value.

https://github.com/krb5/krb5/commit/2938851a5ec77ab68bcd1f5cfd07991c7ccabea6
Author: Greg Hudson <ghudson at mit.edu>
Commit: 2938851a5ec77ab68bcd1f5cfd07991c7ccabea6
Branch: master
 src/lib/krb5/error_tables/krb5_err.et |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)



More information about the krb5-bugs mailing list