krb5 commit [krb5-1.11]: Change KRB5KDC_ERR_NO_ACCEPTABLE_KDF to 100

Tom Yu tlyu at MIT.EDU
Thu Oct 17 18:33:36 EDT 2013


https://github.com/krb5/krb5/commit/16f2a314710507c48f479eb990f5dfc7a0bb34de
commit 16f2a314710507c48f479eb990f5dfc7a0bb34de
Author: Greg Hudson <ghudson at mit.edu>
Date:   Wed Oct 9 13:37:17 2013 -0400

    Change KRB5KDC_ERR_NO_ACCEPTABLE_KDF to 100
    
    draft-ietf-krb-wg-pkinit-alg-agility-07 specifies
    KDC_ERR_NO_ACCEPTABLE_KDF as 82, but this value conflicts with
    KRB_AP_ERR_PRINCIPAL_UNKNOWN from RFC 6111.  The former value has been
    reassigned to 100 to fix the conflict.  Use the correct value.
    
    We believe that this error won't crop up in practice for a long time
    (when SHA-2 has been superceded by other hash algorithms and people
    are desupporting it), by which time implementations will mostly have
    been upgraded to use the new value.
    
    (cherry picked from commit 2938851a5ec77ab68bcd1f5cfd07991c7ccabea6)
    
    ticket: 7724 (new)
    version_fixed: 1.11.4
    status: resolved

 src/lib/krb5/error_tables/krb5_err.et |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/lib/krb5/error_tables/krb5_err.et b/src/lib/krb5/error_tables/krb5_err.et
index eda7dc3..5c6f10b 100644
--- a/src/lib/krb5/error_tables/krb5_err.et
+++ b/src/lib/krb5/error_tables/krb5_err.et
@@ -123,7 +123,7 @@ error_code KRB5KDC_ERR_DIGEST_IN_CERT_NOT_ACCEPTED,	"Digest in certificate not a
 error_code KRB5KDC_ERR_PA_CHECKSUM_MUST_BE_INCLUDED,	"Checksum must be included"
 error_code KRB5KDC_ERR_DIGEST_IN_SIGNED_DATA_NOT_ACCEPTED,	"Digest in signed-data not accepted"
 error_code KRB5KDC_ERR_PUBLIC_KEY_ENCRYPTION_NOT_SUPPORTED,	"Public key encryption not supported"
-error_code KRB5KDC_ERR_NO_ACCEPTABLE_KDF,		"No acceptable KDF offered"
+error_code KRB5PLACEHOLD_82,	"KRB5 error code 82"
 error_code KRB5PLACEHOLD_83,	"KRB5 error code 83"
 error_code KRB5PLACEHOLD_84,	"KRB5 error code 84"
 error_code KRB5KRB_AP_ERR_IAKERB_KDC_NOT_FOUND,         "The IAKERB proxy could not find a KDC"
@@ -141,7 +141,7 @@ error_code KRB5PLACEHOLD_96,	"KRB5 error code 96"
 error_code KRB5PLACEHOLD_97,	"KRB5 error code 97"
 error_code KRB5PLACEHOLD_98,	"KRB5 error code 98"
 error_code KRB5PLACEHOLD_99,	"KRB5 error code 99"
-error_code KRB5PLACEHOLD_100,	"KRB5 error code 100"
+error_code KRB5KDC_ERR_NO_ACCEPTABLE_KDF,		"No acceptable KDF offered"
 error_code KRB5PLACEHOLD_101,	"KRB5 error code 101"
 error_code KRB5PLACEHOLD_102,	"KRB5 error code 102"
 error_code KRB5PLACEHOLD_103,	"KRB5 error code 103"


More information about the cvs-krb5 mailing list