[krbdev.mit.edu #8537] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Thu Feb 2 15:38:43 EST 2017


Track preauth failures instead of tries

In preauth2.c, instead of noting whenever we try a real preauth mech,
note when a mechanism fails on our side.  Tracking only failures
eliminates the need to reset the list for multi-step preauth exchanges
or for processing padata in the AS-REP, but we will need the function
later for continuing after optimistic preauth failures.

https://github.com/krb5/krb5/commit/a1dc81d22304e77edaa8388c7d7d75cade81dc80
Author: Greg Hudson <ghudson at mit.edu>
Commit: a1dc81d22304e77edaa8388c7d7d75cade81dc80
Branch: master
 src/lib/krb5/krb/get_in_tkt.c |    3 --
 src/lib/krb5/krb/int-proto.h  |    3 ++
 src/lib/krb5/krb/preauth2.c   |   65 +++++++++++++++++++++++-----------------
 3 files changed, 40 insertions(+), 31 deletions(-)



More information about the krb5-bugs mailing list