Skip Menu |
 

Subject: windows ms2mit.exe: do not allow MS LSA to provide tickets with short lifetimes
Because of the failure of Windows 2000 and Windows XP to perform proper
ticket expiration time management, the MS Kerberos LSA will return
tickets to a calling application with lifetimes as short as one second.
Tickets with lifetimes less than five minutes can cause problems for
most apps. Tickets with lifetimes less than 20 minutes will trigger the
Leash ticket lifetime warnings.

Instead of accepting whatever tickets are returned by MS LSA from the
cache, if the ticket lifetime is less than 20 minutes force a retrieval
operation bypassing the LSA ticket cache.
To: rt-comment@krbdev.mit.edu
Subject: [krbdev.mit.edu #1962] [jaltman@MIT.EDU] CVS report: krb5/src/windows/ms2mit ms2mit.c ChangeLog
From: Tom Yu <tlyu@mit.edu>
Date: Tue, 21 Oct 2003 18:41:56 -0400
RT-Send-Cc:
Download (untitled) / with headers
text/plain 1.4KiB
add missing CVS log:

Show quoted text
-------------------- Start of forwarded message --------------------
Date: Tue, 21 Oct 2003 18:20:53 -0400 (EDT)
Message-Id: <200310212220.SAA17960@drugstore.mit.edu>
From: jaltman@MIT.EDU
To: cvs-krb5@mit.edu
Subject: CVS report: krb5/src/windows/ms2mit ms2mit.c ChangeLog
Lines: 37

Module Name: krb5
Committed By: jaltman
Date: Tue Oct 21 22:20:49 UTC 2003

Modified Files:
krb5/src/windows/ms2mit/ChangeLog krb5/src/windows/ms2mit/ms2mit.c
Added Files:

Removed Files:


Log Message
ticket: 1962
target_version: 1.3.2
tags: pullup
owner: jaltman@mit.edu
status: resolved

Because of the failure of Windows 2000 and Windows XP to perform proper
ticket expiration time management, the MS Kerberos LSA will return
tickets to a calling application with lifetimes as short as one second.
Tickets with lifetimes less than five minutes can cause problems for
most apps. Tickets with lifetimes less than 20 minutes will trigger the
Leash ticket lifetime warnings.

Instead of accepting whatever tickets are returned by MS LSA from the
cache, if the ticket lifetime is less than 20 minutes force a retrieval
operation bypassing the LSA ticket cache.


To generate a diff of this commit:
cvs diff -r1.5 -r1.6 krb5/src/windows/ms2mit/ChangeLog
cvs diff -r1.4 -r1.5 krb5/src/windows/ms2mit/ms2mit.c
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5

-------------------- End of forwarded message --------------------
From: tlyu@mit.edu
Subject: CVS Commit
pullup from trunk


To generate a diff of this commit:



cvs diff -r1.3.2.2 -r1.3.2.3 krb5/src/windows/ms2mit/ChangeLog
cvs diff -r1.2.2.2 -r1.2.2.3 krb5/src/windows/ms2mit/ms2mit.c