[krbdev.mit.edu #2190] MSLSA ccache uses ticket TicketFlags as KdcOptions in the TGS request without mapping between types

Jeffrey Altman via RT rt-comment at krbdev.mit.edu
Mon Feb 2 19:31:06 EST 2004


GetMSCacheTicketFromCacheInfo() uses the tktinfo->TicketFlags as the
value to assign to TicketRequest->TicketFlags.  This field is blindly
inserted into the kdc-options[0] field of the TGS_REQ.  If there are
bits such as TRANSIT_POLICY_CHECKED in the TicketFlags, this will result
in an unknown TGS_OPTION being processed by the KDC.



More information about the krb5-bugs mailing list