From mdw@quince.ifs.umich.edu Tue Aug 10 04:49:20 1999 Received: from MIT.EDU (PACIFIC-CARRIER-ANNEX.MIT.EDU [18.69.0.28]) by rt-11.MIT.EDU (8.7.5/8.7.3) with SMTP id EAA17441 for ; Tue, 10 Aug 1999 04:49:19 -0400 Received: from quince.ifs.umich.edu by MIT.EDU with SMTP id AA24669; Tue, 10 Aug 99 04:49:30 EDT Received: (from mdw@localhost) by quince.ifs.umich.edu (8.6.13/8.6.12) id EAA13573; Tue, 10 Aug 1999 04:49:17 -0400 Message-Id: <199908100849.EAA13573@quince.ifs.umich.edu> Date: Tue, 10 Aug 1999 04:49:17 -0400 From: mdw@umich.edu Reply-To: mdw@umich.edu To: krb5-bugs@MIT.EDU Cc: mdw@umich.edu Subject: patch to fix kadmind hang and other stuff X-Send-Pr-Version: 3.99 >Number: 738 >Category: krb5-libs >Synopsis: bad or malicious client can hang kadmind. >Confidential: no >Severity: serious >Priority: high >Responsible: tlyu >State: analyzed >Class: sw-bug >Submitter-Id: unknown >Arrival-Date: Tue Aug 10 04:50:02 EDT 1999 >Last-Modified: Fri Sep 28 22:23:28 EDT 2001 >Originator: Marcus D Watts >Organization: University of Michigan ITD PD&D Umich Systetms Gruop >Release: krb5-current-19990201 >Environment: System: SunOS pepper-pot 5.6 Generic_105181-03 sun4u sparc SUNW,Ultra-5_10 Architecture: sun4 >Description: Denial of Service Attack Malicious (or confused) users can hang kadmind by sending bogus network data. >How-To-Repeat: Write special program (not included) to send bad option in gssapi network data. Kadmind on target system will go into an infinite CPU loop, and not respond to any more requests. >Fix: begin 644 patches2.tgz M'XL( ';DKS< ^P\:W/;1I+Y2OZ*<;+ED"(I >!35*1$EF1'%5OR27(E6WM; M* @<4EB1 . DK6)[[=?/P; X$%*\L:I7-5QLR:)Z>[I]_3T#'5Q,X< ROS(&PWYW.##[!HZ; MW;XU_,KX$LP47ZLH=D*82E\L'H0;3*1P_(FX#:_['7<5 MAM*/.^;N[JYA&>9V_3064^^CC,0B"*6(;QQ?_ N4#)^D^!J^S;X6RS"XGLO% MMA"GXL:YD\(/8#STY$3$0=U9+NNA M=&%8@%R1%_@HPJT,KV481&UB&P@"7POG 8024;" SYX/-*Y7L;@)EG*ZFL\? MZL'UG1>L(C&;4V"@'+'P)7&(B"CB!#Y,64@I0AFMYK&X!T:!E 38%RO 2F!>@&T&8R+6V<"'$VV1<-Q7;F,[4BZMAOX ML?P8;[MB[OE I[?;;S6WZ[7&M3>3_J2)%"8P-!.=#JM31C%,$\&$4G@Q3"4C M_]NX7JM%4B[$+(J1!'J#<7N9)DA6BU7 9A+*3O MA@_+&!4;/< $"P!$A;*=)Y!!!/[;A6GFP-/9-C. M!ETGBOL=TQH![UT' B?!3'K&K G'C+AS 5/ RQ*WP&G0OG0IL ^ M20,NYB-.$#ZTP3CQ30!F1E\A /0#WYO"#%$;,/$!TR,S(I.>OY)DX"&!&315ESLSQ_ ALM":T MU$20B*0+.@$/>0O.(/S5 OR;Z8* D4R$"T)OYJ&2IH"WW:S7Y][U#EM^![Q& MAIZKOKZWU??MFWJM;[;0!$7/ L^HO4.NO04JP/'C.>A4Q;KC0H!!.'&@P.08 M7AC;@%2+'OS8B3V7/,T!,/@F%R!;A!H EU\$H$NPOXP0'"#DQR4$% 9P! X# M9NA <( L,_!Y30C4TTY5E( 0/11BX2QUGXT?EL"^#_8$0[BWT6I!CT RRS(0 M?B)!6^@F9!&)^M?QT?XY3.87GLZE/XMO,'HP,G.4OE[YMWYP[W\M J(28?Y; MRA"R#"!O;8FK'T\O!?SW\X^'5^+H\$S\>'CV1OP$"_/IV;'8VJK7!KNC)W#' M#)75 _D\E+8;@L> 8BQC%VE%F'.65V83UFMD?D& N^.C*=QDV$%5F*QH-D >D:6?^6Y(S&$ %G,BZH/H)%XCX-UG*,1,P5DC!)(XDD MZ;J0$Q1CA.N2?RA3 HF'6&;5(WT>N59^UVVX-Q=S2%!\K0*Z)Y9AN[W-6AG/H-%,;Y9),LX (QZ:\CE"?59 MS66XLNE7_I.-/RHS/"PI@\I6=$Z589GD-"ZS.*B6-5Y-IS#,N:4X#'4Q&:B] MP4+]"G^I4EE_5,G!4Z88F.5 J%4[$ ]3IOA,B40CJ1*A- XE%283+YI!38=% M1LFFJ]B;VY1:R:IDM4W+# S[\CY;EL;%M:N7QBS"Y08SK'IMU'T*6#6WJ!2] M$KJ5XM^P#1+>G81=A!/.((\U(BB(H;"5["1A&*1)&J ?R]Q M>$'FX#R.B37$62KI* 4$S?VVD:KJJKR(% MC^1K:V:@$-M^A (O2ILI_,G[_R_:^%&OC?T?T^S39^K_] >6V<<6BM4?FO_? M__D37J>P"?\X%NMW@_O_^:M^<71)6]"QV'&FT;D@[1PDI2W[[[+5&SUQL( .7Y7T.DKY4^' M-@=C,=H ;>6@Q6B,+KD6NIN'AM2+'KD^42A!& &MJDD$J#1/:XT,P,C:<>0: MQ%H[CGR2DGAXG)L8!C9.O(FP]0AC71;LT2!-?&!3C/[Q7K A\C99Z@LJ^M%@ MX6QV>77!>HKPG[GT$R4MY,)=/C#--J-/GB(1Z3E3H+@[6UMBXYE&&TAUW&B$\;TZ.V M24"[:2K]!/;*0J[_5"F^_DSCKU6*K^7SV:5XI;!8C5<-5!3DO5Q!OAEI($P+ M,,:] =?DO?8 2O)>NVMP2;XE_G8Z^1M^0).T4$CN^U +@[^# OB9C0]M+VI( M_-#D1$(@JNX[:? A?P\!MO*CA*)HV?+E[U[:/#RRO[\L/[]^<7 M5Y"=?L^/7AP-TD&FB(=FXN3LZ.KO[T\8^>C5D7WYX^&X8AS1L^$:6&D5^N+H MI\L/[VC\[!0G__$0&/X&0L&;5C!X?'+9S3'X(C=\=HX0&I- !$";>"/1K. M^--8\%,2>?K51(C&N^-^E0J2X:.+(VV*LBHN+@^1A*8))/6)WQ2T :/P!!(= M*,G@%"!^@9>@NQ3WWD3Z.[X3AL$]=W?PA.)Z+K'C M$6M>G.@1<+/)&/^&(! M>:5E&>B65J_7'B4[17*KB1,[(G)#;-KLT6/RQ5!.;&]B\YF+K0XJ]L79A[=O M]S+D/.A$SN6,OJ>0K00R=7CAWBH'+CKVK?K ]#T_!O;AF7L?( MGC(N/$!I>X:)TO:L87N82(NOA?.O(+3QK'@5 8]O+L'L]NO#T[#MC/%.-LXIO,%O +C[&SWC:3)-(!JN^^"VM7#:K*H&BFSO[X+8U]E.^SY*M1=+29_*)%1 [7%?+_@2Z:=KM,T>*&C0P_>\AIYE M'<:I=VKB2@=5-Z2DQP>>'Z%^@>+%ZHGKAQB/5CQ?W-] ]4#Y%;'](+W@@#=1 MHJ5TO:DG)VV\Y#$+)54Z=$]H'9'6DUA@W;5&:VD\G9'-I$#M@4^7=/BR3A7- M;7'$UW3P+@S=N?&!18IJPN?^/ZB=5B^TZ^OS"UA]3HXO[?/W5Z?G9Z*!3B^: MVZDQ3<*X^4C<;A8Y$>43 M"[_;;_=V07IKM]VW6'Q*$5@77,LYE ZH /6:2)3=!L;LA80R?):H/\UL$/S> M-!_SRH0'8.NVNOWH:.Z,-V'"P 5R>N;?1"?QA,>I"2WC;O N9$U?SCR0:CUT M1_-%$KWV!!2KEZV#$.)SV? .>/UA_-PSBH92#X1%A.HI]98]A@1=O7CQ0D!> M2>*=ZK3S#U>7I\"E+H:ERIL$>/>$KZ>L2)=X?X56KDTL MI5O8E"TEE'BN&'09%Z9%!@#8:JO[HVH>$@LKVS" *]8HOXF<)@MVS-17>Y(%B6:5JXA,_7B4SA>[ M:'?CX 5H[7IC(M1C'I!0U.J[<&*#^FV:P(::DC9.VBKSDEE*5Q;22"/EPM8V M9DWQ?0[JI;83&]-.C):7U"D>T7\&IQF 'W[*C/,DY:1R;_(J\9F*48OJ!J4D M$&L4TJH]7B@S3-$31';_9H?Q'$PDFT MA.EII,-K%TG%H#=H#?0OTB:D+.8=(_VW# MWK&3CJG4 G-W#J+5]:U\H)Y!TJE+P-;WFC9"4+N).-X=M4UDN=MK=T=IHX"F MY5*6KM/MB]&>-H+7"9WY3*NUE>-TN/6TOLNVCJMNQC@9-FN8E( N#G]6'ENE MG+48&O?>S&?NNWOKQ#4'U?*:>7F%UA1,!=9[IEFS8T-C] FRI!A%Z5-9OHV^ MU0=RTEB]'$XJS;=N@I,D@BIYM"YOM3B%/N[CTB0(GR5,UUHC3+A&F,3GDC24 MVRR2A+A#4KR5-TAINL@U6E2G3,E6':=935-: M;.7H+7.##_8.8I7#R? MR,@-O24L?[3AR9_AY'YX\9<\O=$YW'AN,RR=VPQ%04 ^L=$?;3BK&:JSFFKP MY.94U^1^N+%+_7!C-^L0X#&DNU@VTB-1*CRVZ9< "\E_F/^D@I+:;@+V MI5"+=P[PMN^"GC>Q#VDDFWG$[QS$L]B6'Y? %'@+DXP]V&MO@VOC!W(8!I4J MR!@*'/%Z'KBW6G^YAFYE*\0TEVW1SPVS$H8S>M9*(8'-(0ELCG+-ST]U+2!R MM/>YH/_3Q"CP0^W/:2C9DMPF]V.]#"3J4.WK 5+X-=%?,$#R''[V'4,EH'[! MD!]5!,B@\G9A$7P@S.[8W!T;'"!05("[P+^[B;=@1>4Z+B2K!OYDJ:A_E-.R8B/XF=Q5)D3K27M/UQ;XB_TTQ^/M'I3 )Q"B4:9D?^>>R-%WTO M.J!?\5I>(\-)"5AY,%J'*JUT.A5*MRVVRH=6>P)S,F+B6JE*1#N#BS\J; @% M5(O9Q[JP9?9WU3D:']+?R/E2AND/SB!Q5QWVKCF!$>\OSJ_.<>UH-'2)FDV2 MYOR=O?+\N&MA>W(F8QLXI9T,Q)&&F8'ETD%;<*HJ'.MMX4><@(0:X(E(RQP: M2BCF @MXF[+(QM\EB/15E$/%JDACEG@HX.,9XW5ZC)'Y4M(CW.*&J=K@86!MOZX\@2R24VM*E'Q=PWX@P#;A^D?DRECG(:39 >^)A_:K-U1 MGUQFUVR;IO*9=;,"U6FPPE\Q/ZY,KG*JIA6YJWIB"Z^5D"^U5&V/>H(I55L5 ML1^7LY5H,_-B/ #%:D5LL2^EU5I=J!E46<-UWY-4J:?_@E1TS-LL9/R*7T_^ M!;-^FH>]VPM[V_!YSWM'DZVF $+);SSDG9[^5(X-U@L5ZK/=(-7!9(?I;/Y1/H[\>STZOEGC@77QM/^-FXTFIG0SR*(Z;QP M@@E/B"Q^,.C?QR^,-+/5G_5*3#13J^>OPD10O& P:W=3M)CN'.0NQ+"O#@;4 MV^H.Z5WKQV73_KJ">"3E\K8<*64MU9?[XG]*/=6T)YGW/]69UIHMZP!&HH5G MEMOIW:1:VAEDPM3/5O[+0"UK) ZX6T G0/:[PU^R[D(9'F: C*M/4XDNE)EH MJX1,KMLJ 66T2TT% -VM@__;)Q<7]NO3D[?']M7Y^=OSLS=-U3]1#>Y-:AJU M\CP_HK6B/"U11 <]LH4U=6ZTT5/MD\B3!"W^ZI\NUF*'V$D"&X]'@V+04_K! M0S6^64;;Z![LII-+6<]2?\('56(F!V^2@X)0W)EM0=N?Y.\"30*^>82GXM^G MG6\]W'%'H/T] RVD>)G%<*!#=5XSN2[FV*$QM0MOIUDU75 IN]2HC^7.I>.O MEEIW,4M_H$:QN*7L+@3WSZC)SAE?_PM'JP@^\J]_XS!X@"_930RFH()V7QR^ MQ[.S2_O#Y8E]^>'53R=_5S<[S#X6(JU>UTH*DEH.]?<,]]V'JP^';^V+D__Z M<'IQ+]1WWM+Q#-I"D1;E41SL/KQ%.!>3%>+4EF*F;8=^@ Q**8'*1W M6S,/?YFY/^LSWY=--T1)'7#Z[8+^U%6T O6>@F_[N0C'97LA% <)^D7199:GD9%0_*TC47N CM[FQ M\IL;S3_R>Z:JFV="@]9MQ5N>9FJ-81^BHS4TS%*0_&][U][4UG'%^R_^%!MG MP!+W"NOJQ94PSKA8N)[&D!JG3<=E&$"0:(H1 3E#FM+/WCV/?>]]2#@9VEB) M;6GO[MY]G;-GS_F=LSROQ+J;1A6K;9W>5&3*=EO8'^^P9G').OWQIZSR'&A- M$O/<>PZ86 EHG T]NSL[1WO[NZ^_'J.G@OL0G[W;W?]V[R5B)5'Q9K*\.AJ_ M^>;=WV6V%SM_&LOE O,"$X+66\G$NGUMO14QLYDRX(K <-8V3UPS+DQ3E:%6 MU+#5%OM<%+[ F!)%I34Q8N<5@46QNU4R-MK:&PY.%@Q.#9NOWZV(O;>Z6Q&3 M;]@M8RB-=JS3\TM&;+]B ?.OW[/0]%O=L=#ZNW"_M TXTJ_KXG[!3+I68*&] M9R(8]SO-36I9>_FM!?4I3N@9;$'@A9,MN2 MU58Y,:V+;\9O=_??OGFQMS,6^[L4^/!@?_?=WUZ\'6]HISLY:KF.-.U(.NIY^_\-<-'::0K8$L/PXN[L?+RRL0\?"H3*7://W6P ,N\^QF/IG.-GYX M;HMN!8I7VB.OKJ<_'9'3E)27*M7MJ&!I=Z'AW;84TES','W^Q;^-HQ68*.2Q M>KN=BKD\U,JOJ:4@]+6(J5B_FE]7.H)!Q=-3K&MZ"@S"))^X/V_.?L27);;L M#I*@% &/+RCJY]GU_'@*3A.7$*7O$J)2:4-BU(YHN]TX9A$C;( ]"(0\A2!A M%@&E7(^^$^9OH(;3UAQD>DYE3:U[I%!N5DNHAN?@E$^]!2]U' 62R'1BOA4% MN]'QR-)5LBH_0^^>;D=.M1(T> ;!J4TV3(';HR(@SWM%SR1;1 "NDL\!'8SA@94G# M1W04J'H3)]*K5.:6S*V^KPJ310U2%!EHWM36GGIXK)Y3ZO=,J#A\#=;A-\4, M0/19+S%;9<(UL<]YC>*#A%9(O!+C/]>8!V$] /5R2Q[GC3FYDVV3+Z?6]++Z M<+RW_V;\IJE,"N!HF71[RK,.,P/@7"XLY4O")DYJ]P]GQW)J:G5'WIC=0<<@(JB/%.X&XKQL MV:E=-_6NA.6? XYH?MZ0#%_R]/2QV@9'@F6B[=5;P8*5_/J/R\>I>I*J=-?\ M2EWI;6STQ>[TXL+A _TNF?0V>^K 0;FOCDGQ>75Q/#74#$(.K!9@H'"B(O@L M1',GV*RGC^&ZP,0HC]= >)@!]*EDS2@80+27A M;57YR=I.L,6F(L6N[X+MHY[7IM4%X=*5MI]@K(])GR-$.JYYVU&O\K+\:J\5 M=B:M+:>V;"VU0GE@MUJ$MBGYG5](WT!:6)W JGV4V),A?TH"M7]BN/]EV9)+E"!FK MHN%0O A^,3O"KS,>LEL:*1:'3'Y;WC*LT//^IB8_LXH5KF?YB2]IM3_P6UAW M\6[_S]37-P>O+/BZMWT@\]B*/Y0,AK<+L.;EX)^?*<0Z2!@#7UL07BIOCZ9^'! O:<1V67N'>$AGI@X+-%F0G\!]X[?;JEQ>\ MUO5D$P/@#D.F8%OCM'H'GSFXLH$\7T<"VDI^V]"XIZOM_-;^ M0ZU59/@HP2;*?QL-.&:L-ZG)[]N'85H62>M$TKJ'34?9X5GVN>'.2DQQ^E)! MQ[RK&9J$FH(;A[I7[Q%XS=E24=9KLA(UEC$B1S591ZW$2DMK"@VFOFCUC+@% M\VA#32BR@.% RE%);Y"Q.+5BH+_VXL;S$$']6%FIN(1LF",NEG.*Q"\;Z50% MKUG!9LE]N:(9-.["%MMKO3PHI\E1KWP/;6(PDD_9.(K@U%Z>F1.>:/PT Z]& M?CN:J*$)>45OZ8,]+J\E[.Z"]#@2QR=PA8IU&\.763U*!#-_0P=PL[L@1KI% M,I]JKT5N*LFC5I.80EP=3CH:R23$2,N,!$=(JI%+*G'^Y4$BK.ZI$^A47LFC#_[0&^HBR M[G2P2"Q#%XYLLEVP)%%R0KKISWTDY7-FV0IWW-EKWCGK7&E0NL0U9\ M$-A0Z"):M$F859%46, [2!E7-*)O-WL3C60H%%LT1Z>+Y_Z!2\'86)0UD\65 M^<>XM)UB3:W(\4X/Q#UH2@FZSAY9B[KHT&6=._7P&;((GGE$%GF>53SO5#R/ MT5^E9"C7@0VI;WP/JK&CLQ\_'E\T4#\&JA(T@"/MS2X@"K&-P%#/K#NZZ%:^\F7T MO[!\C!^WJPPR6_&69D5NA;;&1:?,5;5P1?![ M=GXNV9-61=D*%AV"A?A2@G?]97YG^Z[0#C]PWLJ(ZNY4LY;3EA BT>:7MVN8Q23*80PFXZ MN_RJ/0*M?2K6Z4X8F^$)->$XA3Y;$^[$6GF8 M7?],.(#E0 /<9@Q#3&"% 7H @:*@VW.L_N3:0RN?5J3Q*Y53+(\_E K[P]'< M6 Y$I7G?L^,CHXV9]0WAUM(_L^J./9WT@=IX$859*."5K?2\,YKDQ$("RTF< MSW\F,/"<[S)V(052,(CA"2JP!(RW!!" 8S^R5/6^2S_C#!RVX<"3FL8ZL1@6 M(=*6A0 (Q(35S8IPUB(;(5R@9:Y/,RS9 ,3 2MH^!*4(?,LP[#ZO+@T%8_LJ MY^ERGD4V1<4N[FM,/3B^G,K%0'*@,:?VLP&J4;I#Y=VKMIV&BVK#> IK:U(^ M50=2.<)9DX"B_ G+9%BF9KRG"!#'LH.#F/3[@[2CT4CJC&[+DD>T M_A#TZ<@)[D$^"8MTVIJ,K")DQW4"-M$ *)+4D$/S@E-XP0K2KJY_5=(,NM;I ME 0M3FX.T(,%[;V.5BBX_1"!H:-5ZY(^<, MUZ/$'J]PF"*6)GZ+MU$8J!Y M^=INFLKXZ?O4 58?>@T\/[O$Q/2L:L--@" 8F,/:B:6_UR.Q"+=0V&]%G MIW.Y95A@2%9&:C2D!2&2-2EIZ0M"_)V?HR.!R[X*282VBGJB_3(3ZT&/@OVA M''ED[Q@QX)&P+"UB"5,+?1;AA:9(#E((Z/0Q'Z&>I5#"WL:JD@_RD'9\>CJ[ MGN"..<-(^SK<)X5%&PQ[P*.-Z;"^X5NQ_7N(/($Q< 'K-Y+;R13T_Y/I\248 MEF$@%%<8F?;]]I;"I-027K_EO[$I<= ?PO$CV>P-TN& I;PBV<*( 2VG$;!@ M/EQY5K54N!IC7T-<7=;7&X?FO%K6O&ICWJ>SY2W+MU[XYCQ%%-4&O(@YZ<$9 M8*K,=VH?M6QXC@G/]<6NM.:9;;G$HK>D06\9>UZI.:_JW&H?#XAIH$ZO&8V& MJ4\(!5Y]]UNEQD+(AL'XZJRR"D9&PEN6T1Q998Y.90YW<2HVAF*-4M6![DJ1 M"K6D^OB-Y#Z*/8*K41R,L=> MHGO_&UEQBR373V+)+7N=;3C%0%[+6$W]G=>GX@H2KJ#?FL2[G QROUT:Y'>X MMB<073NW]_EC#[=&O#F2$ R/XV@@Q\G.8*:@(E=6*U>G5JYNK5R]6KGZM7(- M:N7:K)4KKY5K6&]4:PY^O='/Z@U_5F_\LWH3D/4//>7$/65U5Q+4-W9@/)!N M!^Q)>;YI8+E+GCTB,I@B_;SHS%%0QG0EUV<-LVO3)V( P@YMHH%LV,ULWU#0 MM\_ D/A1"E!P+K?M:DJQ9XG'$+8G &YH$=G%9:1B3:,Y4J/M6:@R#\;A5FFD MZC6RE#N6L!K":TQRM7$?'^?3BR.>AX>(_+#;MW @6Z=S@/ZP$R+XCZ$3O#:> M>2"R-H2)Z X) 9*C';&C(T_%T!1A&.9'K9K!.$^8I/6=4X^2)4OJ"P!Y]90$ MIRV.GKWE%'8#9ZMG)C2VHOP"O 8O9,BO#1TZC+0*YT#>)FG6!B<^-1?WHX'!W/G:/+U,7/62%OAC/_0^;-U+XE>3-WSO!F2JC) MF_W,Q)N[H_: ;>B(E^GIV-,,3&,47HLCW+BNP[A(I5@JI_Z7=NK\=R>II*1, M-H@7LD@3;JR6+(G"J_HX,(7[JH@M0_0"@?5Q*XC"OB!BHLUZ?2YO/?.CZ\N' MOU@W7O@,-C&L24"$3G[]V<2S4SGD$X>F83AM=)U.L2H("6@S-@>(YKR+(JT9 M$YM[I;US-<"C4D0:O#(DN9NSAWKGD=6\Y0B.NZ;IC7Z'Y-9OA^3FYT5JZP%L MEOQL$7)J.T45;-$BN'-A_N%*_C"!GZ86S%.'>;=CO ?\&0**JOJ3X$)N$E68=$2 MF?PS/=01!3)-_Y/9V0TQ ;@Z64ZJ$XE9PRDL4W<@)^@P]#6%!-M04&(@H$XJ MYV_D=H!D!%L :O*$F52,3AW.!,]!9'^C8\V#)C=JX+($Q]VS2(Y2ZA*=GYO( MKCWJ]CC(#L9#ZCM&92]4AB.>AS>VH"3>"AZA$"-W0EIE[K/YV8.\^'2,8@8%]SA7 IX1E%9GQ76'%?:,R7O\>6=UK-Y$C?,;__1[Q?W_X_/G\^?SYW7[^"_K-A1 M end >Audit-Trail: Responsible-Changed-From-To: gnats-admin->tlyu Responsible-Changed-By: tlyu Responsible-Changed-When: Fri Sep 28 22:22:08 2001 Responsible-Changed-Why: refiled State-Changed-From-To: open-analyzed State-Changed-By: tlyu State-Changed-When: Fri Sep 28 22:22:15 2001 State-Changed-Why: Ok... this is going to take us some work. The option parsing is clearly borken, and for quite some time. A general audit or outright rewrite of the gssapi library may be called for at this point, unfortunately. >Unformatted: