[20015] in Kerberos_V5_Development

home help back first fref pref prev next nref lref last post

MS-SFU errata changed KDC order of precedence of

daemon@ATHENA.MIT.EDU (Isaac Boukris)
Sun Jan 26 08:21:45 2020

MIME-Version: 1.0
From: Isaac Boukris <iboukris@gmail.com>
Date: Sun, 26 Jan 2020 14:21:24 +0100
Message-ID: <CAC-fF8SaLr+bVP2DRfuTx4bNYuuyGVicADf136v60jrxpBUmpA@mail.gmail.com>
To: Greg Hudson <ghudson@mit.edu>, krbdev@mit.edu
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu

Hi Greg,

I noticed an update changing the order to prefer
ServicesAllowedToSendForwardedTicketsTo over
ServicesAllowedToReceiveForwardedTicketsFrom, which means the KDC
prefers legacy-cd over RBCD.

https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-winerrata/68c4fd08-207c-4353-b59d-4d281edfb6bf

I'm not clear what the impact is, maybe the returned error in some
cases, but I think we should probably change accordingly.

Isaac
_______________________________________________
krbdev mailing list             krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev

home help back first fref pref prev next nref lref last post