[28896] in Kerberos
Re: password incorrect but it's not, works fine with Solaris + MIT?
daemon@ATHENA.MIT.EDU (Jeff Blaine)
Wed Dec 12 09:37:29 2007
Message-ID: <475FF1E6.5020806@kickflop.net>
Date: Wed, 12 Dec 2007 09:36:22 -0500
From: Jeff Blaine <jblaine@kickflop.net>
MIME-Version: 1.0
To: Marcus Watts <mdw@spam.ifs.umich.edu>
In-Reply-To: <E1J2DOA-0006Bf-LW@spam.ifs.umich.edu>
Cc: kerberos@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
The patch applies cleanly to 1.6.3 and solves the problem.
Old 1.2.7 kinit as provided with RHELv3 works fine now.
Marcus Watts wrote:
> I was hoping you would try different salt types on the principal itself
> (while leaving the enctype as des-cbc-crc). Still, you appear to have
> 2 of 3 necessary conditions to manifest the bug described here:
> http://mailman.mit.edu/pipermail/krb5-bugs/2006-February/004246.html
> in which case, this patch applied to the kdc may fix it:
> http://www.umich.edu/~mdw/krb5143-kdcetype.diff
>
> I don't think you ever said what version of kerberos you had installed
> on your server, so I don't know how much trouble you'll have patching that.
> This patch was developed against MIT 1.4.3, but substantially the same
> code (and presumably the same behavior) was still there as of 1.6.1.
>
> -Marcus Watts
>
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
