[krbdev.mit.edu #5664] Cred cache can contain multiple similar tickets during x-realm auth

Public Submitter via RT rt-comment at krbdev.mit.edu
Fri Aug 17 18:37:11 EDT 2007

Previous message: [krbdev.mit.edu #5663] kinit -S can fail if using a "fallback" mechanism to determine realm
Next message: [krbdev.mit.edu #5665] krb5_get_cred_from_kdc_opt() can return stale creds
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

In a cross-realm scenario the cred-cache can become populated with
multiple similar tickets. This happens when a KDC returns a "closer" tgt
which is different to the requested ticket.
The attached patch resolves this issue.

Previous message: [krbdev.mit.edu #5663] kinit -S can fail if using a "fallback" mechanism to determine realm
Next message: [krbdev.mit.edu #5665] krb5_get_cred_from_kdc_opt() can return stale creds
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

More information about the krb5-bugs mailing list