Kerberos packets appear to be larger

Benjamin Kaduk kaduk at MIT.EDU
Sun Aug 11 15:51:49 EDT 2013


On Fri, 9 Aug 2013, Jeremy Hunt wrote:

> What I found was that changing the password with kpasswd or kadmin cpw
> or adding a new principal generally changed the size of the AP-REP
> packet for different values of these checksum variables. I changed both
> checksum variables to the same value in my testing. However I found
> using kdb_util dump then load reset the size of the AP-REQ packet to the
> 786 value I originally reported. Probably kdb_util doesn't look at these
> configuration settings at all.

I am not sure I understand the specifics of the dump+load procedure 
involved.  Was the dump performed before or after the password change 
operation?

-Ben Kaduk


More information about the Kerberos mailing list