[krbdev.mit.edu #6656] SVN Commit
Sam Hartman via RT
rt-comment at krbdev.mit.edu
Tue Feb 9 14:15:08 EST 2010
There are two issues with return_enc_padata.
1) It often will return an empty sequence of enc_padata rather than not including the field
2) FAST negotiation is double supported in the referral tgs path and not supported in the non-referral path
Rewrite the return_enc_padata logic to:
* Split out referral interactions with kdb into its own function
* Use add_pa_data_element
http://src.mit.edu/fisheye/changelog/krb5/?cs=23712
Commit By: hartmans
Revision: 23712
Changed Files:
U trunk/src/kdc/do_as_req.c
U trunk/src/kdc/do_tgs_req.c
U trunk/src/kdc/kdc_preauth.c
U trunk/src/kdc/kdc_util.c
U trunk/src/kdc/kdc_util.h
More information about the krb5-bugs
mailing list