Proposal: Support for 32 bit version numbers in keytabs

Jeffrey Altman jaltman at columbia.edu
Fri Dec 3 02:42:11 EST 2004


Jeffrey Altman wrote:
> 
> I don't know but I am attempting to find out.

Here is the response from the Java Security team:

"This change will affect Java GSS/Kerberos compatibility.

"Sun's implementation of Java Kerberos assumes each record in the
keytab has fixed number of fields, hence adding version at the end
will not work for Java applications. The key version (kvno) is
expected to be 8-bit.

"Java uses Version 2 of MIT keytab file, and also supports reading
Version 1 keytab file to support backward compatibility."

- Jeff




More information about the krbdev mailing list