[19746] in Kerberos_V5_Development
Sequence number without mutual auth
daemon@ATHENA.MIT.EDU (Weijun Wang)
Wed Apr 11 23:20:42 2018
From: Weijun Wang <weijun.wang@oracle.com>
Mime-Version: 1.0 (Mac OS X Mail 11.3 \(3445.6.18\))
Date: Thu, 12 Apr 2018 11:20:16 +0800
Message-Id: <D2F5812B-0CD8-4F08-B456-03ED7C99619F@oracle.com>
To: "krbdev@mit.edu" <krbdev@MIT.EDU>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@MIT.EDU
Without mutual auth, the acceptor has no chance to send an initial sequence number to the initiator, so they must agree on a default one.
In my experiment, it looks like MIT krb5 and Windows are reusing the initiator's initial sequence number and Heimdal is using 0.
Am I right? If so, is there a way to write an app that works for all of them? Or the acceptor simply should not send anything when there is no mutual auth?
Thanks
Max
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
