[krbdev.mit.edu #1818] 64-bit cleanliness in lib/krb4/tf_util.c
Sam Hartman via RT
rt-comment at krbdev.mit.edu
Sun Sep 7 15:10:46 EDT 2003
>>>>> "nalin at redhat" == nalin at redhat com via RT <rt-comment at krbdev.mit.edu> writes:
nalin at redhat> Hi, I've stumbled onto a 64-bit cleanliness problem
nalin at redhat> in tf_util.c's versions of tf_get_cred() and
nalin at redhat> tf_save_cred(). The issue date in the credential
nalin at redhat> structure is written to and read from the file as a
nalin at redhat> long.
Unfortunately, this is not a bug, but rather the behavior people seem
to expect. Or at least the people with 64-bit systems don't want to
see this change because it would break existing ticket files.
The current claim is that the ticket-file format is dependent on
sizeof long and thus is dependent on the ABI of the library in
question. If you wanted a sane authentication system you wouldn't be
using krb4.
There has been some discussion of adding support to read both formats
on all systems but I don't think code has been written.
This is a duplicate of another report with a much longer explanation
of the issue; I don't remember which report right now, but will try to
find it and link the two tickets.
More information about the krb5-bugs
mailing list