Skip Menu |
 

To: krb5-bugs@MIT.EDU
Subject: Regression: pkinit causes assertion failure in 1.7 beta2
Date: Thu, 21 May 2009 13:01:50 -0400 (EDT)
From: hartmans@MIT.EDU (Sam Hartman)

Using a set of configuration files and database that works with pkinit with the 1.6.4 beta1 KKDC,
I get
krb5kdc: ../../src/kdc/kdc_authdata.c:577: handle_authdata: Assertion `enc_tkt_reply->authorizatio
n_data == ((void *)0)' failed.


when I try to request a pkinit authenticated ticket with 1.7 beta2 and
with the trunk.
From: ghudson@mit.edu
Subject: SVN Commit

In handle_authdata in the KDC, remove a spurious assertion (added in
r21566 on the mskrb-integ branch) that authdata starts out empty.
authdata can be legitimately added by check_padata, which precedes
handle_authdata, and this happens with pkinit.


https://github.com/krb5/krb5/commit/dba341349d6a9ba07fc837a8913128746212008c
Commit By: ghudson
Revision: 22360
Changed Files:
U trunk/src/kdc/kdc_authdata.c
From: tlyu@mit.edu
Subject: SVN Commit

pull up r22360 from trunk
------------------------------------------------------------------------
r22360 | ghudson | 2009-05-22 16:08:25 +0200 (Fri, 22 May 2009) | 10 lines

ticket: 6492
subject: Remove spurious assertion in handle_authdata
tags: pullup
target_version: 1.7

In handle_authdata in the KDC, remove a spurious assertion (added in
r21566 on the mskrb-integ branch) that authdata starts out empty.
authdata can be legitimately added by check_padata, which precedes
handle_authdata, and this happens with pkinit.

https://github.com/krb5/krb5/commit/ec749034fa482811f960fbb822bdd59c0b64f4e6
Commit By: tlyu
Revision: 22375
Changed Files:
U branches/krb5-1-7/src/kdc/kdc_authdata.c