[krbdev.mit.edu #1618] src/windows/ms2mit inserts local addresses into MS Tickets during conversion

via RT rt-comment at krbdev.mit.edu
Wed Jun 18 11:23:53 EDT 2003


Given the desire to move towards the use of addressless tickets is it
appropriate to alter the behavior of the ms2mit.exe command.  In this
command the function MSCredToMITCred() takes the addressless MS Ticket
and calls krb5_os_localaddr() to construct an address list.  The
comments state this was done to prevent crashing in krb5_cc_store_cred()
because that function assumes the address list cannot be NULL.  At the
very least there must be at least a null address.

The local address list is generated regardless of the user preferences
in the krb5 profile.  

One of two proposed fixes should be applied:

(1) remove the call to krb5_os_localaddr() entirely which will result in
the addressless tickets staying that way.  A null address list would
need to be constructed in its place.

(2) check the krb5 profile to see if addressless tickets are being used.
 If not, call krb5_os_localaddr() otherwise construct a null address list.

I will design a patch as soon as the proper behavior is agreed to.



More information about the krb5-bugs mailing list