HELP!! invalid AS-REP from Linux running MIT Kerberos V5

Tom Yu tlyu at MIT.EDU
Tue Jul 11 18:48:05 EDT 2006


>>>>> "Eliza" == Khosrova, Eliza <Eliza.Khosrova at cda.canon.com> writes:

Eliza> We have a Kerberos client application that runs under Windows.  The
Eliza> client application sent a valid AS-REQ to our KDC in Linux.  
Eliza> The KDC successfully processed it and sent back AS-REP to our client
Eliza> application.  However, when our application successfully decrypts 
Eliza> The 'enc-part' field of AS-REP, it is of type EncTGSRepPart (application
Eliza> 26) instead of being of type EncASRepPart (application 25)
Eliza> as described in section 5.4.2 of RFC 1510 http://rfc.net/rfc1510.html .
Eliza> It seems like the AS-REP from our Linux is not conforming 
Eliza> to RFC.

Please see RFC 4120, Section 5.4.2.  It explains exactly this
situation.

---Tom



More information about the Kerberos mailing list