[krbdev.mit.edu #6656] SVN Commit

Sam Hartman via RT rt-comment at krbdev.mit.edu
Tue Feb 9 14:15:08 EST 2010


There are two issues with return_enc_padata.
1)  It often will return an empty sequence of enc_padata rather than not including the field
2) FAST negotiation is double supported in the referral tgs path and not supported in the non-referral path

Rewrite the return_enc_padata logic to:

* Split  out referral interactions with kdb into its own function
* Use add_pa_data_element

http://src.mit.edu/fisheye/changelog/krb5/?cs=23712
Commit By: hartmans
Revision: 23712
Changed Files:
U   trunk/src/kdc/do_as_req.c
U   trunk/src/kdc/do_tgs_req.c
U   trunk/src/kdc/kdc_preauth.c
U   trunk/src/kdc/kdc_util.c
U   trunk/src/kdc/kdc_util.h




More information about the krb5-bugs mailing list