Issue with kvno

Benjamin Kaduk kaduk at MIT.EDU
Fri May 29 11:45:48 EDT 2015


I don't have a definite answer for you, but:

1.7 is very old.

4294967295 is 0xffffffff is -1 as a 32-bit twos-complement integer

255 is 0xff is -1 as an 8-bit twos-complement integer.

kvnos are supposed to be unsigned integers, but krb5 prior to 1.10 (and
evern moreso prior to 1.6) had bugs where they were treated as signed
quantities.

-Ben Kaduk


On Thu, 28 May 2015, vishal wrote:

> Hi,
>
> I did not get any answer for my query:
>
> "
> Hi,
>
> I see an issue with kvno with kerberos version 1.7 where linux server is
> sending the kvno to trusted domain as 4294967295 while it gets this as 255
> from home domain.
>
> Is this an known issue?
>
> Thanks,
> Vishal"
>
>
>
> On Tue, May 26, 2015 at 11:07 PM, vishal <vicky.recw at gmail.com> wrote:
>
> > Hi,
> >
> > I see an issue with kvno with kerberos version 1.7 where linux server is
> > sending the kvno to trusted domain as 4294967295 while it gets this as 255
> > from home domain.
> >
> > Is this an known issue?
> >
> > Thanks,
> > Vishal
> >
> ________________________________________________
> Kerberos mailing list           Kerberos at mit.edu
> https://mailman.mit.edu/mailman/listinfo/kerberos
>


More information about the Kerberos mailing list