RT RT/krbdev.mit.edu: Ticket #6941 Fix accidental KDC use of replay cache Signed in as guest.
[Logout]

[Home] [Search] [Configuration]

[Display] [History] [Basics] [Dates] [People] [Links] [Jumbo]

 
 

 The Basics  
Id
6941
Status
resolved
Worked
0 min
Priority
0/0
Queue
krb5
 

 Keyword Selections  
Component
Tags
Version_reported
Version_Fixed
  • 1.9.2
Target_Version
  • 1.9.2
 

 Relationships  
Depends on:
Depended on by:
Parents:
Children:

Refers to:
Referred to by:
 
 Dates  
Created: Mon Aug 8 14:27:16 2011
Starts: Not set
Started: Mon Aug 8 14:27:16 2011
Last Contact: Tue Oct 18 16:18:45 2011
Due: Not set
Updated: Wed Dec 16 18:02:57 2015 by tlyu
 

 People  
Owner
 ghudson
Requestors
 ghudson@mit.edu
Cc
 
AdminCc
 
 

 More about Greg Hudson  
Comments about this user:
No comment entered about this user
This user's 25 highest priority tickets:
 

History   Display mode: [Brief headers] [Full headers]
      Mon Aug  8 14:27:16 2011  ghudson - Ticket created    
     
From: ghudson@mit.edu
Subject: SVN Commit


r24464 (ticket #6804) intended to remove the KDC replay cache by
eliminating all of the USE_RCACHE code, but it had the unintended side
effect of causing krb5_rd_req_decoded to use the default server
rcache.  Using this cache is much less efficient because it is opened
and re-read for each request.

Set appropriate flags on the auth context to disable replay cache use
for TGS requests altogether.

https://github.com/krb5/krb5/commit/d7618afafe8c712d09da2bc2f9841ffd7fc1d0c7
Commit By: ghudson
Revision: 25076
Changed Files:
U   trunk/src/kdc/kdc_util.c


Download (untitled) 558b
      Mon Aug  8 14:27:16 2011  ghudson - Requestor ghudson@mit.edu added    
      Mon Aug  8 14:27:17 2011  ghudson - Status changed from new to review    
      Mon Aug  8 14:27:17 2011  ghudson - Tags pullup added    
      Mon Aug  8 14:27:17 2011  ghudson - Target_Version 1.9.2 added    
      Tue Oct 18 16:18:45 2011  tlyu - Status changed from review to resolved    
      Tue Oct 18 16:18:45 2011  tlyu - Version_Fixed 1.9.2 added    
      Tue Oct 18 16:18:45 2011  tlyu - Correspondence added    
     
From: tlyu@mit.edu
Subject: SVN Commit


pull up r25076 from trunk

 ------------------------------------------------------------------------
 r25076 | ghudson | 2011-08-08 14:27:15 -0400 (Mon, 08 Aug 2011) | 14 lines

 ticket: 6941
 subject: Fix accidental KDC use of replay cache
 target_version: 1.9.2
 tags: pullup

 r24464 (ticket #6804) intended to remove the KDC replay cache by
 eliminating all of the USE_RCACHE code, but it had the unintended side
 effect of causing krb5_rd_req_decoded to use the default server
 rcache.  Using this cache is much less efficient because it is opened
 and re-read for each request.

 Set appropriate flags on the auth context to disable replay cache use
 for TGS requests altogether.

------------------------------------------------------------------------

https://github.com/krb5/krb5/commit/87127004d4de670852027006079d10fbf6a56e78
Commit By: tlyu
Revision: 25374
Changed Files:
U   branches/krb5-1-9/src/kdc/kdc_util.c


Download (untitled) 927b
      Wed Dec 16 18:02:57 2015  tlyu - Keyword pullup deleted