MS - Extensions kdc cores while making S4U2self request

Luke Howard lukeh at padl.com
Tue Jan 27 01:41:10 EST 2009


Nikhil,

Thanks for finding the bug.

Try stepping through kdc_process_s4u2self_req() in the KDC.

--luke

On 27/01/2009, at 10:13 AM, Nikhil Mishra wrote:

> Thanks Luke it helped .
>
> Being a newbie , it took a lot of time though for me to figure this  
> out on my own .
> Anyways , Now my S4U2self requests return me following error :
>
> KDC policy rejects request while getting credentials



>
>
>
> I guess I need to define some policy on kdc to be able to get  
> S4U2self tickets .
>
> Thanks anyways .
>
> --Nikhil--
>
> On Tue, Jan 27, 2009 at 4:18 AM, Luke Howard <lukeh at padl.com> wrote:
> My bad, does this help:
>
> Index: asn1_k_decode.c
> ===================================================================
> --- asn1_k_decode.c	(revision 21793)
> +++ asn1_k_decode.c	(working copy)
> @@ -1208,6 +1208,7 @@
>  {
>      setup();
>      { begin_structure();
> +	alloc_field(val->user, krb5_principal_data);
>          get_field(val->user,0,asn1_decode_principal_name);
>          get_field(val->user,1,asn1_decode_realm);
>          get_field(val->cksum,2,asn1_decode_checksum);
>
>
> --luke
>

--
www.padl.com | www.fghr.net




More information about the krbdev mailing list