RT RT/krbdev.mit.edu: Ticket #6912 Use hmac-md5 checksum for PA-FOR-USER padata Signed in as guest.
[Logout]

[Home] [Search] [Configuration]

[Display] [History] [Basics] [Dates] [People] [Links] [Jumbo]

 
 

 The Basics  
Id
6912
Status
resolved
Worked
0 min
Priority
0/0
Queue
krb5
 

 Keyword Selections  
Component
Tags
Version_reported
Version_Fixed
  • 1.9.2
Target_Version
  • 1.9.2
 

 Relationships  
Depends on:
Depended on by:
Parents:
Children:

Refers to:
Referred to by:
 
 Dates  
Created: Sat May 14 10:49:01 2011
Starts: Not set
Started: Sat May 14 10:49:02 2011
Last Contact: Thu Jun 9 17:08:54 2011
Due: Not set
Updated: Wed Dec 16 18:02:57 2015 by tlyu
 

 People  
Owner
 ghudson
Requestors
 ghudson@mit.edu
Cc
 
AdminCc
 
 

 More about Greg Hudson  
Comments about this user:
No comment entered about this user
This user's 25 highest priority tickets:
 

History   Display mode: [Brief headers] [Full headers]
      Sat May 14 10:49:01 2011  ghudson - Ticket created    
     
From: ghudson@mit.edu
Subject: SVN Commit


The MS-S4U documentation specifies that hmac-md5 be used for
PA-FOR-USER checksums; we were using the mandatory checksum type for
the key.  Although some other checksum types appear to be allowed by
Active Directory KDCs, Richard Silverman reports that md5-des is not
one of them, causing S4U2Self requests to fail for DES keys.


https://github.com/krb5/krb5/commit/582eacef47c1a9c9386bf588978125322ac6b970
Commit By: ghudson
Revision: 24929
Changed Files:
U   trunk/src/lib/krb5/krb/s4u_creds.c


Download (untitled) 498b
      Sat May 14 10:49:02 2011  ghudson - Requestor ghudson@mit.edu added    
      Sat May 14 10:49:02 2011  ghudson - Status changed from new to review    
      Sat May 14 10:49:02 2011  ghudson - Tags pullup added    
      Sat May 14 10:49:02 2011  ghudson - Target_Version 1.9.2 added    
      Thu Jun  9 17:08:54 2011  tlyu - Status changed from review to resolved    
      Thu Jun  9 17:08:54 2011  tlyu - Version_Fixed 1.9.2 added    
      Thu Jun  9 17:08:54 2011  tlyu - Correspondence added    
     
From: tlyu@mit.edu
Subject: SVN Commit


pull up r24929 from trunk

 ------------------------------------------------------------------------
 r24929 | ghudson | 2011-05-14 10:49:00 -0400 (Sat, 14 May 2011) | 11 lines

 ticket: 6912
 subject: Use hmac-md5 checksum for PA-FOR-USER padata
 target_version: 1.9.2
 tags: pullup

 The MS-S4U documentation specifies that hmac-md5 be used for
 PA-FOR-USER checksums; we were using the mandatory checksum type for
 the key.  Although some other checksum types appear to be allowed by
 Active Directory KDCs, Richard Silverman reports that md5-des is not
 one of them, causing S4U2Self requests to fail for DES keys.

https://github.com/krb5/krb5/commit/ae3f34ebcca28b009b47973af8d8a163cb9b891a
Commit By: tlyu
Revision: 24954
Changed Files:
U   branches/krb5-1-9/src/lib/krb5/krb/s4u_creds.c


Download (untitled) 796b
      Wed Dec 16 18:02:57 2015  tlyu - Keyword pullup deleted