[krbdev.mit.edu #8573] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Wed Apr 12 11:50:45 EDT 2017


Check for FAST in encrypted challenge client

If we reach the encrypted challenge clpreauth process method without
an armor key, error out instead of crashing.  This can happen if (a)
the KDC offers encrypted challenge even though the request doesn't use
FAST (the Heimdal KDC apparently does this), and (b) we fall back to
that preauth method before generating a preauthenticated request,
typically because of a prompter failure in encrypted timestamp.
Reported by Nico Williams.

https://github.com/krb5/krb5/commit/ff6aac3e018e80fa32df2e14446c6ed9595dfc3c
Author: Greg Hudson <ghudson at mit.edu>
Commit: ff6aac3e018e80fa32df2e14446c6ed9595dfc3c
Branch: master
 src/lib/krb5/krb/preauth_ec.c |    2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)



More information about the krb5-bugs mailing list