HELP!! invalid AS-REP from Linux running MIT Kerberos V5
Tom Yu
tlyu at MIT.EDU
Tue Jul 11 18:48:05 EDT 2006
>>>>> "Eliza" == Khosrova, Eliza <Eliza.Khosrova at cda.canon.com> writes:
Eliza> We have a Kerberos client application that runs under Windows. The
Eliza> client application sent a valid AS-REQ to our KDC in Linux.
Eliza> The KDC successfully processed it and sent back AS-REP to our client
Eliza> application. However, when our application successfully decrypts
Eliza> The 'enc-part' field of AS-REP, it is of type EncTGSRepPart (application
Eliza> 26) instead of being of type EncASRepPart (application 25)
Eliza> as described in section 5.4.2 of RFC 1510 http://rfc.net/rfc1510.html .
Eliza> It seems like the AS-REP from our Linux is not conforming
Eliza> to RFC.
Please see RFC 4120, Section 5.4.2. It explains exactly this
situation.
---Tom
More information about the Kerberos
mailing list