Skip Menu |
 

History Show all quoted text — Show full headers
# Fri Mar 19 23:50:07 2010 ghudson@mit.edu (Greg Hudson) - Ticket created
From: ghudson@mit.edu
Subject: SVN Commit
Download (untitled) / with headers
text/plain 909B

KRB5_AUTHDATA_SIGNTICKET, originally a Heimdal authorization data
type, was used to implement PAC-less constrained delegation in krb5
1.8. Unfortunately, it was found that Microsoft was using 142 for
other purposes, which could result in a ticket issued by an MIT or
Heimdal KDC being rejected by a Windows Server 2008 R2 application
server. Because KRB5_AUTHDATA_SIGNTICKET is only used to communicate
among a realm's KDCs, it is relatively easy to change the number, so
MIT and Heimdal are both migrating to a new number. This change will
cause a transitional interoperability issue when a realm mixes MIT
krb5 1.8 (or Heimdal 1.3.1) KDCs with MIT krb5 1.8.1 (or Heimdal
1.3.2) KDCs, but only for constrained delegation evidence tickets.


https://github.com/krb5/krb5/commit/5321c69e3306febb2c8021119916b46aed8ef5e5
Commit By: ghudson
Revision: 23821
Changed Files:
U trunk/src/include/krb5/krb5.hin
# Fri Mar 19 23:50:07 2010 ghudson@mit.edu (Greg Hudson) - Requestor ghudson@mit.edu (Greg Hudson) added
# Fri Mar 19 23:50:07 2010 ghudson@mit.edu (Greg Hudson) - Status changed from 'new' to 'review'
# Fri Mar 19 23:50:07 2010 ghudson@mit.edu (Greg Hudson) - Tags pullup added
# Fri Mar 19 23:50:07 2010 ghudson@mit.edu (Greg Hudson) - Target_Version 1.8.1 added
# Mon Mar 22 21:58:30 2010 tlyu (Taylor Yu) - Version_Fixed 1.8.1 added
# Mon Mar 22 21:58:30 2010 tlyu (Taylor Yu) - Correspondence added
From: tlyu@mit.edu
Subject: SVN Commit
Download (untitled) / with headers
text/plain 1.1KiB

pull up r23821 from trunk

------------------------------------------------------------------------
r23821 | ghudson | 2010-03-19 20:50:06 -0700 (Fri, 19 Mar 2010) | 17 lines

ticket: 6687
subject: Change KRB5_AUTHDATA_SIGNTICKET from 142 to 512
target_version: 1.8.1
tags: pullup

KRB5_AUTHDATA_SIGNTICKET, originally a Heimdal authorization data
type, was used to implement PAC-less constrained delegation in krb5
1.8. Unfortunately, it was found that Microsoft was using 142 for
other purposes, which could result in a ticket issued by an MIT or
Heimdal KDC being rejected by a Windows Server 2008 R2 application
server. Because KRB5_AUTHDATA_SIGNTICKET is only used to communicate
among a realm's KDCs, it is relatively easy to change the number, so
MIT and Heimdal are both migrating to a new number. This change will
cause a transitional interoperability issue when a realm mixes MIT
krb5 1.8 (or Heimdal 1.3.1) KDCs with MIT krb5 1.8.1 (or Heimdal
1.3.2) KDCs, but only for constrained delegation evidence tickets.

https://github.com/krb5/krb5/commit/68156d04e3e7fc3080d8aabf366bc52b96852c49
Commit By: tlyu
Revision: 23828
Changed Files:
U branches/krb5-1-8/src/include/krb5/krb5.hin
# Tue Mar 23 03:22:03 2010 tlyu (Taylor Yu) - Status changed from 'review' to 'resolved'
# Wed Dec 16 18:02:55 2015 tlyu (Taylor Yu) - CustomField pullup deleted