RT/krbdev.mit.edu: Ticket #2602 Don't reject renewable of non-renewable tickets

RT/krbdev.mit.edu: Ticket #2602 Don't reject renewable of non-renewable tickets

Signed in as guest.
[Logout]

[Home]

[Search]

[Configuration]

[Display]

[History]

[Basics]

[Dates]

[People]

[Links]

[Jumbo]

The Basics

Id
2602

Status
resolved

Worked
0 min

Priority
0/0

Queue
krb5

Keyword Selections

Component
Version_reported
Version_Fixed
Target_Version
Tags

Relationships

Depends on:

Depended on by:

Parents:

Children:

Refers to:

7661: (ghudson) Refactor KDC renewable ticket handling [review]

Referred to by:

Dates

Created:	Thu Jun 17 16:30:13 2004
Starts:	Not set
Started:	Fri Jun 7 00:47:38 2013
Last Contact:	Not set
Due:	Not set
Updated:	Fri Jun 7 00:47:38 2013 by ghudson

People

Owner
Nobody
Requestors
hartmans@mit.edu, jaltman@mit.edu
Cc

AdminCc

More about Sam Hartman

Comments about this user:
No comment entered about this user
This user's 25 highest priority tickets:

1220: automatically updating tgt keys desired (new)
1221: password history should use master key (new)
1231: kdc/kdc_util.c: add_to_transited_encoding fails to support null fields (new)
1272: ktutil addent is not documented (new)
1273: kadmin should gain option to remove old keys from keytab (new)
1274: kadmin should not authenticate simply to run the ktrem command (new)
1340: capaths documentation insufficient (open)
1341: krb5.conf and kdc.conf should be merged (new)
1366: src/lib/gssapi/krb5/add_cred.c could benefit from goto (new)
1407: KDC should not check transited policy on intermediat tgts (new)
1445: GSSAPI can fail to generate error in GSS_C_NO_CREDENTIAL case (new)
1505: use_master loop seems at wrong abstraction (new)
1507: Convert principal name accessors to functions (new)
1516: reject_bad_transit not handled through definitions.texinfo (new)
1671: no locking used when reading/writing replay cache? (new)
2078: [Ray Schneider] ksu man page nit (new)
2110: MIT KDC fails to handle unknown padata (open)
2497: krb5_fcc_generate_new should use mkstemp (open)
2555: kadmind uses channel bindings (new)
2620: Don't expire contexts when tickets expire (new)
2696: Nullsoft Installer does not preserve configuration settings (open)
2794: Implement krb5_c_prf and GSSAPI prf (new)
3181: init_ctx.c has goto labels crossing outside of switch arms (new)
3328: src/lib/gssapi/krb5/3des.txt incorrect (new)
3425: Buffer overflows in kdb_load_library could lead to arbitrary code execution (new)

More about Jeffrey Altman

Comments about this user:
No comment entered about this user
This user's 25 highest priority tickets:

1527: krb5_rd_safe_basic() throws exception when sender_addr is NULL (new)
1809: Krb5 Telnet[d] improperly truncates 3DES keys to DES key (new)
2137: krb5_cc_get_principal prevents implementation of auto kinit dialogs in KfM/KfW (new)
2145: gss_release_buffer() too easily deallocates memory it should not (new)
2147: Debug output hooks need to be added to support Windows Help Desk (open)
2253: W2K+3 vs MIT RC4-HMAC based cross-realm trusts (open)
2536: Krb5 Admin Guide fails to document krb524 (new)
2547: Add support for kpasswd/TCP to kadmind (open)
2596: src/krb524/README out of date (new)
2636: replace all calls to getenv()/setenv() with Get/SetEnvironmentVariable on Windows (open)
2640: krb5_cc_default() blocks for two minutes when MSLSA and Logon Server Unavailable (open)
2736: recode krb5_get_credentials to work without a ccache (new)
3112: telnet does not build on Fedora Core 4 (new)
4157: Windows README is out of date (new)
4325: src/include/krb5_err.h needs to be updated to match RFC4120 (new)
4328: Implement new krb5_get_credentials option: KRB5_GC_REPLACE (open)
4740: cccursor backend for MSLSA (new)
5501: Vista UAC impact on Windows Installer requires modifications to admin privilege test (open)
5536: Build Script Fails to build KFW (open)
5543: Build Scripts fail to package with "beta" version (new)
5714: Build Script - Update for 64-bit Windows build (open)
5718: NIM: BUG: APP: Configuration Identity Panel Apply Button (open)
5720: NIM: BUG: APP: Create command-line request queue (open)
5721: NIM: BUG: KRB5: Identity validation can succeed without prompts (open)
5722: NIM: FEATURE: KRB5: If KDCs for a particular realm become reachable, prompt for new creds (open)

History

Display mode: [Brief headers] [Full headers]

Thu Jun 17 16:30:14 2004	hartmans - Ticket created
To: krb5-bugs@mit.edu Date: Tue, 15 Jun 2004 21:48:44 -0400 (EDT) From: hartmans@mit.edu (Sam Hartman) Subject: Don't reject renewable of non-renewable tickets Based on MS interop tests, it would be desirable not to reject TGS requests containing the renewable or renew option for non-renewable TGTs. INstead grant the request without making the request renewable.		Download (untitled) 208b
Thu Feb 7 18:31:05 2008	jaltman - Requestor jaltman@mit.edu added
Fri Jun 7 00:47:38 2013	ghudson - Status changed from new to resolved
Fri Jun 7 00:47:38 2013	ghudson - Ticket 2602 RefersTo ticket 7661.
Fri Jun 7 00:47:38 2013	ghudson - Comments added
This is fixed as part of #7661.		Download (untitled) 31b