[krbdev.mit.edu #7051] SVN Commit
Tom Yu via RT
rt-comment at krbdev.mit.edu
Tue Jan 10 22:59:23 EST 2012
Pull up r25584 from trunk
------------------------------------------------------------------------
r25584 | ghudson | 2011-12-12 19:53:56 -0500 (Mon, 12 Dec 2011) | 9 lines
ticket: 7051
subject: krb5_server_decrypt_ticket_keytab wrongly succeeds
If krb5_server_decrypt_ticket_keytab doesn't find a key of the
appropriate enctype in an iterable keytab, it returns 0 (without
decrypting the ticket) due to a misplaced initialization of retval.
This bug causes kinit -k to claim "keytab entry valid" when it
shouldn't. Reported by mark at mproehl.net.
http://src.mit.edu/fisheye/changelog/krb5/?cs=25641
Commit By: tlyu
Revision: 25641
Changed Files:
U branches/krb5-1-10/src/lib/krb5/krb/srv_dec_tkt.c
More information about the krb5-bugs
mailing list