[krbdev.mit.edu #1415] subkeys fubar
Sam Hartman
hartmans at MIT.EDU
Sun Apr 20 00:59:07 EDT 2003
>>>>> "Tom" == Tom Yu via RT <rt-comment at krbdev.mit.edu> writes:
Tom> If we change client code to additionally smash the local
Tom> subkey if it receives a subkey from the server, then the
Tom> semantic of "server subkey wins" will be accomplished. This
Tom> change to the client code won't break against servers with
Tom> the old behavior of merely sending back in the AP-REP the
Tom> client subkey as received in the AP-REQ.
I think this is probably wrong to do though. I think this discussion
is best handled in person than through the bug system.
More information about the krb5-bugs
mailing list