KRB_AP_REQ data buffer length

Srinivas Cheruku csri at sonata-software.com
Wed Jul 24 05:26:58 EDT 2002


Hi,

I will get a data buffer containing DER encoded KRB_AP_REQ from a client
application. This client application is built using the raw MIT libraries
and not GSS. Will the first few bytes of the encoded data buffer hold the
size of the KRB_AP_REQ? 

Thanks and Regards,
Srini

-----Original Message-----
From: Sam Hartman [mailto:hartmans at mit.edu]
Sent: 23 July 2002 19:36
To: Srinivas Cheruku
Cc: kerberos at mit.edu
Subject: Re: KRB_AP_REQ data buffer length


>>>>> "Srinivas" == Srinivas Cheruku <csri at sonata-software.com> writes:

    Srinivas> Hi All, What will be length of the DER Encoded data
    Srinivas> buffer holding KRB_AP_REQ?  Is there any way to find out
    Srinivas> the length of the Encoded buffer?

The implementation guarantees it will be less than your total address
space;-)

It contains a ticket; the spec sets no length on tickets.  Typically
with MIT Kerberos, you can see messages containing ap_req as short as
511 bytes, but messages exceeding 4KB are not unheard of.  You
probably should support at least 64k, probably significantly more.
*********************************************************************
Disclaimer: The information in this e-mail and any attachments is
confidential / privileged. It is intended solely for the addressee or
addressees. If you are not the addressee indicated in this message, you may
not copy or deliver this message to anyone. In such case, you should destroy
this message and kindly notify the sender by reply email. Please advise
immediately if you or your employer does not consent to Internet email for
messages of this kind.
*********************************************************************



More information about the Kerberos mailing list