[19629] in Kerberos_V5_Development
Re: PAC verification fails for enterprise principals
daemon@ATHENA.MIT.EDU (Greg Hudson)
Wed Aug 23 21:12:00 2017
To: Stefan Metzmacher <metze@samba.org>,
"krbdev@mit.edu Dev List" <krbdev@mit.edu>
From: Greg Hudson <ghudson@mit.edu>
Message-ID: <5175c051-1923-c46c-3cc1-e44a36c0ceae@mit.edu>
Date: Wed, 23 Aug 2017 21:11:49 -0400
MIME-Version: 1.0
In-Reply-To: <76ac560a-6c63-a875-d5dd-0ff38f5bd6e5@samba.org>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On 08/23/2017 07:19 PM, Stefan Metzmacher wrote:
> I found that krb5_pac_verify() fails if I asked for
> S4U2Self with an enterprise principal.
> I'd prefer to take over the logic from Heimal, if that's ok
> I'll prepare a patch for that.
That is probably fine. I can't easily verify that quoting problems
won't get in the way, but if it's not causing a problem for Heimdal then
it's probably fine.
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
