[31547] in Kerberos

home help back first fref pref prev next nref lref last post

Re: kinit-1.7: wrong passwords lock active directory accounts

daemon@ATHENA.MIT.EDU (Greg Hudson)
Wed Oct 7 18:23:00 2009

From: Greg Hudson <ghudson@mit.edu>
To: "mark@mproehl.net" <mark@mproehl.net>
In-Reply-To: <4ACCA005.9050605@mproehl.net>
Date: Wed, 07 Oct 2009 15:05:50 -0400
Message-Id: <1254942350.9616.116.camel@ray>
Mime-Version: 1.0
Cc: "kerberos@mit.edu" <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

An update: this turns out to be a known bug in krb5 1.7, which simply
hadn't percolated into my conscience from the bug data.

I can't offer you a runtime workaround (there aren't a lot of
configuration knobs affecting client preauth), but I expect to fix it
for a forthcoming 1.7.x release.  I can offer you a code workaround if
you're in a position to recompile the client code.


________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post