Ticket History #2184: KfW 2.6 Beta 2 Ticket Importation errors with Pismere MSI installed version

Ms2mit failed to work properly during login. On the other machines when
the cache is in this state, leash32 refuses to start or report errors. On
win2k3, Leash does start and indicates that I have tokens, but no v5 tgt
and no v4 tgt.

However, when I type ms2mit at the command line I now see an error message:
"Internal credentials cache error while copying MS LSA cache to default
ccache."

The original machine that Joe reported the problems on was JEST.MIT.EDU.
I have tried to login to the machine to observe the problems and they
do not occur with my account. This leads me to believe that they may be
related to some functionality associated with a particular account.

Perhaps the size of the PAC within the ticket. I need more information.

* cc_mslsa.c: the MSLSA code was crashing on Pismere machines when
logging on with cross realm credentials. On these machines there are
8 tickets within the LSA cache from two different realms. One of the
krbtgt/CLIENT-REALM@CLIENT-REALM tickets (not the Initial ticket but
a Forwarded ticket) is inaccessible to the ms2mit.exe and leash32.exe
processes. The attempt to access the ticket returns a SubStatus code
of STATUS_LOGON_FAILURE (0xC000006DL) which is supposed to mean that
the logon attempt was invalid due to bad authentication information.
kerbtray has no problem listing this ticket. The other seven tickets
in the cache including the Initial Ticket are accessible. Modified
krb5_lcc_next_cred() to skip to the next ticket if an attempt to read
a single ticket fails.


To generate a diff of this commit:



cvs diff -r5.97 -r5.98 krb5/src/lib/krb5/ccache/ChangeLog
cvs diff -r5.10 -r5.11 krb5/src/lib/krb5/ccache/cc_mslsa.c

pullup from trunk


To generate a diff of this commit:



cvs diff -r5.82.2.8 -r5.82.2.9 krb5/src/lib/krb5/ccache/ChangeLog
cvs diff -r5.3.2.7 -r5.3.2.8 krb5/src/lib/krb5/ccache/cc_mslsa.c