[krbdev.mit.edu #6893] error codes from error responses can be	discarded when there's e-data 
    Greg Hudson via RT 
    rt-comment at krbdev.mit.edu
       
    Tue Apr 19 14:43:18 EDT 2011
    
    
  
Are you actually seeing unframed KRB-ERROR responses with e_data?  If so, 
from what server, and what's in the e_data?
The intention of the code is to work around the specific interoperability 
bug where an AD server returns an unframed KRB-ERROR message with no 
e_data, which was a specific observed behavior.  If there are servers 
returning unframed KRB-ERROR messages with e_data, we need to figure out 
how to process it.  The current code intentionally treats the packet as 
garbage (because plen is wrong and the circumstances don't meet the 
specific interop workaround).
    
    
More information about the krb5-bugs
mailing list