RT RT/krbdev.mit.edu: Ticket #6917 Restore fallback non-referral TGS request to same realm Signed in as guest.
[Logout]

[Home] [Search] [Configuration]

[Display] [History] [Basics] [Dates] [People] [Links] [Jumbo]

 
 

 The Basics  
Id
6917
Status
resolved
Worked
0 min
Priority
0/0
Queue
krb5
 

 Keyword Selections  
Component
Tags
Version_reported
Version_Fixed
  • 1.9.2
Target_Version
  • 1.9.2
 

 Relationships  
Depends on:
Depended on by:
Parents:
Children:

Refers to:
Referred to by:
 
 Dates  
Created: Thu Jun 2 21:00:53 2011
Starts: Not set
Started: Thu Jun 2 21:00:53 2011
Last Contact: Thu Jun 9 17:09:05 2011
Due: Not set
Updated: Wed Dec 16 18:02:57 2015 by tlyu
 

 People  
Owner
 ghudson
Requestors
 ghudson@mit.edu
Cc
 
AdminCc
 
 

 More about Greg Hudson  
Comments about this user:
No comment entered about this user
This user's 25 highest priority tickets:
 

History   Display mode: [Brief headers] [Full headers]
      Thu Jun  2 21:00:53 2011  ghudson - Ticket created    
     
From: ghudson@mit.edu
Subject: SVN Commit


MIT krb5 1.2 and earlier KDCs reject TGS requests if the canonicalize
bit is set.  Prior to 1.9, we used to handle this by making a
non-referral fallback request on any error, but the rewrite in 1.9
mistakenly changed the behavior so that fallback requests are only
made if the original request used the referral realm and the fallback
realm is different from the default realm.  Restore the old behavior.

https://github.com/krb5/krb5/commit/e921ed51eafc312c5725f5a76fe823a5cf6b9a4b
Commit By: ghudson
Revision: 24946
Changed Files:
U   trunk/src/lib/krb5/krb/get_creds.c


Download (untitled) 574b
      Thu Jun  2 21:00:53 2011  ghudson - Requestor ghudson@mit.edu added    
      Thu Jun  2 21:00:53 2011  ghudson - Status changed from new to review    
      Thu Jun  2 21:00:53 2011  ghudson - Tags pullup added    
      Thu Jun  2 21:00:54 2011  ghudson - Target_Version 1.9.2 added    
      Thu Jun  9 17:09:05 2011  tlyu - Status changed from review to resolved    
      Thu Jun  9 17:09:05 2011  tlyu - Version_Fixed 1.9.2 added    
      Thu Jun  9 17:09:05 2011  tlyu - Correspondence added    
     
From: tlyu@mit.edu
Subject: SVN Commit


pull up r24946 from trunk

 ------------------------------------------------------------------------
 r24946 | ghudson | 2011-06-02 21:00:52 -0400 (Thu, 02 Jun 2011) | 12 lines

 ticket: 6917
 subject: Restore fallback non-referral TGS request to same realm
 target_version: 1.9.2
 tags: pullup

 MIT krb5 1.2 and earlier KDCs reject TGS requests if the canonicalize
 bit is set.  Prior to 1.9, we used to handle this by making a
 non-referral fallback request on any error, but the rewrite in 1.9
 mistakenly changed the behavior so that fallback requests are only
 made if the original request used the referral realm and the fallback
 realm is different from the default realm.  Restore the old behavior.

https://github.com/krb5/krb5/commit/23f63d6fafee6c79546f47424d43db22d2a26b33
Commit By: tlyu
Revision: 24957
Changed Files:
U   branches/krb5-1-9/src/lib/krb5/krb/get_creds.c


Download (untitled) 885b
      Wed Dec 16 18:02:57 2015  tlyu - Keyword pullup deleted