Ticket History #6585: KDC MUST NOT accept ap-request armor in FAST TGS

# Mon Nov 23 19:53:36 2009 hartmans (Sam Hartman) - Ticket created

From:	hartmans@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 487B

Per the latest preauth framework spec, the working group has decided
to forbid ap-request armor in the TGS request because of security
problems with that armor type.

This commit was tested against an implementation of FAST TGS client to
confirm that if explicit armor is sent, the request is rejected.

https://github.com/krb5/krb5/commit/117873bc61d5dcda8f060845cfa19ea5f4409016
Commit By: hartmans
Revision: 23324
Changed Files:
U users/hartmans/fast-negotiate/src/kdc/fast_util.c

# Mon Nov 23 19:53:36 2009 hartmans (Sam Hartman) - Requestor hartmans (Sam Hartman) added

# Mon Nov 23 19:53:36 2009 hartmans (Sam Hartman) - Status changed from 'new' to 'review'

# Mon Nov 23 19:53:36 2009 hartmans (Sam Hartman) - Tags pullup added

# Mon Nov 23 19:53:36 2009 hartmans (Sam Hartman) - Target_Version 1.7.1 added

# Mon Nov 23 20:05:30 2009 hartmans (Sam Hartman) - Correspondence added

From:	hartmans@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 463B

Per the latest preauth framework spec, the working group has decided
to forbid ap-request armor in the TGS request because of security
problems with that armor type.

This commit was tested against an implementation of FAST TGS client to
confirm that if explicit armor is sent, the request is rejected.

https://github.com/krb5/krb5/commit/d55064e02f1078be49e9ff4200bc98cff7002834
Commit By: hartmans
Revision: 23325
Changed Files:
U trunk/src/kdc/fast_util.c

# Mon Nov 30 09:05:17 2009 hartmans (Sam Hartman) - Correspondence added

From:	hartmans@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 200B

Fix memory leak

https://github.com/krb5/krb5/commit/8d9228f0f12c843f7d19eefa50c58a3e4e355103
Commit By: hartmans
Revision: 23383
Changed Files:
U users/hartmans/fast-negotiate/src/kdc/fast_util.c

# Mon Nov 30 09:14:48 2009 hartmans (Sam Hartman) - Correspondence added

From:	hartmans@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 176B

Fix memory leak

https://github.com/krb5/krb5/commit/10c4b6e3daf791ab76cd85899a8f5b933b9a10cf
Commit By: hartmans
Revision: 23384
Changed Files:
U trunk/src/kdc/fast_util.c

# Mon Jan 11 23:15:31 2010 tlyu (Taylor Yu) - Status changed from 'review' to 'resolved'

# Mon Jan 11 23:15:31 2010 tlyu (Taylor Yu) - Version_Fixed 1.7.1 added

# Mon Jan 11 23:15:31 2010 tlyu (Taylor Yu) - Correspondence added

From:	tlyu@mit.edu
Subject:	SVN Commit

Download (untitled) / with headers
text/plain 957B

pull up r23325, 23384 from trunk

------------------------------------------------------------------------
r23384 | hartmans | 2009-11-30 09:14:47 -0500 (Mon, 30 Nov 2009) | 4 lines

ticket: 6585

Fix memory leak

------------------------------------------------------------------------
r23325 | hartmans | 2009-11-23 20:05:30 -0500 (Mon, 23 Nov 2009) | 12 lines

ticket: 6585
subject: KDC MUST NOT accept ap-request armor in FAST TGS
target_version: 1.7.1
tags: pullup

Per the latest preauth framework spec, the working group has decided
to forbid ap-request armor in the TGS request because of security
problems with that armor type.

This commit was tested against an implementation of FAST TGS client to
confirm that if explicit armor is sent, the request is rejected.

https://github.com/krb5/krb5/commit/d683ddfe24ee02a4d748b509d21142acced0fc8d
Commit By: tlyu
Revision: 23643
Changed Files:
U branches/krb5-1-7/src/kdc/fast_util.c

# Wed Dec 16 18:02:54 2015 tlyu (Taylor Yu) - CustomField pullup deleted