[krbdev.mit.edu #7791] git commit

Tom Yu via RT rt-comment at krbdev.mit.edu
Wed Jan 8 22:30:26 EST 2014


Fix S4U2Self against non-FAST KDCs

When we added FAST TGS support in 1.11, we broke S4U2Self against KDCs
which don't support FAST, because the S4U2Self padata is only present
within the FAST request.  For now, duplicate that padata in the outer
request so that both FAST and non-FAST KDCs can see it.

(cherry picked from commit 55c3a5f69919c2b5435bac0cb48ab09b11be869c)

https://github.com/krb5/krb5/commit/590b690483e7924186a5bd4b8cd40267bc6e6795
Author: Greg Hudson <ghudson at mit.edu>
Committer: Tom Yu <tlyu at mit.edu>
Commit: 590b690483e7924186a5bd4b8cd40267bc6e6795
Branch: krb5-1.12
 src/lib/krb5/krb/fast.c |   39 ++++++++++++++++++++++++++++++++++-----
 1 files changed, 34 insertions(+), 5 deletions(-)



More information about the krb5-bugs mailing list