[krbdev.mit.edu #2190] MSLSA ccache uses ticket TicketFlags as KdcOptions in the TGS request without mapping between types
Jeffrey Altman via RT
rt-comment at krbdev.mit.edu
Mon Feb 2 19:31:06 EST 2004
GetMSCacheTicketFromCacheInfo() uses the tktinfo->TicketFlags as the
value to assign to TicketRequest->TicketFlags. This field is blindly
inserted into the kdc-options[0] field of the TGS_REQ. If there are
bits such as TRANSIT_POLICY_CHECKED in the TicketFlags, this will result
in an unknown TGS_OPTION being processed by the KDC.
More information about the krb5-bugs
mailing list