Received: from luminous.mit.edu (LUMINOUS.MIT.EDU [18.101.1.61]) by krbdev.mit.edu (8.9.3p2) with ESMTP id LAA20249; Wed, 11 Feb 2004 11:30:18 -0500 (EST)
Received: by luminous.mit.edu (Postfix, from userid 1000) id 78C8876650; Wed, 11 Feb 2004 11:28:46 -0500 (EST)
To: "Douglas E. Engert" <deengert@anl.gov>
Cc: rt-comment@krbdev.mit.edu
Subject: Re: [krbdev.mit.edu #2110] MIT KDC fails to handle unknown padata
References: <rt-2110-9482.10.0437391081773@krbdev.mit.edu> <401EB351.4A6AD67@anl.gov> <ldvznbrljsq.fsf@cathode-dark-space.mit.edu> <40296378.3D0B2D47@anl.gov> <tsl7jyu4ben.fsf@konishi-polis.mit.edu> <402A4901.5771EF38@anl.gov>
From: Sam Hartman <hartmans@mit.edu>
Date: Wed, 11 Feb 2004 11:28:46 -0500
In-Reply-To: <402A4901.5771EF38@anl.gov> (Douglas E. Engert's message of "Wed, 11 Feb 2004 09:23:46 -0600")
Message-Id: <87y8r91sxt.fsf@luminous.mit.edu>
User-Agent: Gnus/5.1006 (Gnus v5.10.6) Emacs/21.1 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
RT-Send-Cc: 
X-RT-Original-Encoding: us-ascii
Content-Length: 789

>>>>> "Douglas" == Douglas E Engert <deengert@anl.gov> writes:

    Douglas> Sam Hartman wrote:
    >>  Hi, Doug.  I applied your patches and they seemed to work.
    >> 
    >> However I was unable to reproduce the error you got against a
    >> 1.2.x or 1.3.x KDC.  I was able to reproduce this problem
    >> against a 1.0.7 KDC.


    Douglas> OK. Since I can't get Microsoft code does to send a
    Douglas> PA-PAC-REQUEST to a non-MS KDC and the code patch to let
    Douglas> MIT kinit send a PA-PAC-REQUEST will not be needed once
    Douglas> Todd gets the hotfix for the AD finished it is very
    Douglas> unlikely the problem will show up.

Consider how extensions works.  If this problem actually happens it
will be a critical problem for MIT trying to implement extensions.