[19490] in Kerberos_V5_Development
Re: end of pointer arrays in krb5_creds
daemon@ATHENA.MIT.EDU (Rick van Rein)
Fri Sep 16 04:40:34 2016
Message-ID: <57DBAFEC.5020603@openfortress.nl>
Date: Fri, 16 Sep 2016 10:40:12 +0200
From: Rick van Rein <rick@openfortress.nl>
MIME-Version: 1.0
To: krbdev@mit.edu
In-Reply-To: <57DBAFCD.8060908@openfortress.nl>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
Hi,
Thanks. A surprise that I am running into:
The hostaddresses are OPTIONAL, so I would have expected the array pointer (so the **) to be NULL when no host addresses are present in the krb5_creds structure. However, when using "kinit -A" to login, I do find an array but its first element is NULL.
Normally I would have assumed that a list is prescribing, unless absent. But it seems that the empty list is an exception, and treated as a carte blanche re. host addresses.
This confuses me somewhat -- what does it mean if there are only IPv4 addresses on the list, and I am approached over an IPv6 address? My gut feeling says "reject"... right?
-Rick
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
