Ticket History #8539: Preauth tryagain should copy KDC cookie

# Sat Jan 21 13:14:48 2017 ghudson@mit.edu (Greg Hudson) - Ticket created

Subject:

Preauth tryagain should copy KDC cookie

Download (untitled) / with headers
text/plain 415B

RFC 6113 requires that "The client MUST copy the exact cookie
encapsulated in a PA-FX-COOKIE data element into the next message of the
same conversation." When we try again after a mechanism-specific error
(which in practice means a PKINIT error), we do not copy the KDC cookie.
We should fix this for better performance, but we do not need to
backport the fix as PKINIT does not require the use of cookies.

# Fri Jan 27 13:36:48 2017 ghudson@mit.edu (Greg Hudson) - Given to ghudson@mit.edu (Greg Hudson)

# Fri Jan 27 13:36:48 2017 ghudson@mit.edu (Greg Hudson) - Status changed from 'open' to 'review'

# Fri Jan 27 13:36:48 2017 ghudson@mit.edu (Greg Hudson) - Correspondence added

From:	ghudson@mit.edu
Subject:	git commit

Download (untitled) / with headers
text/plain 471B

Echo KDC cookies in preauth tryagain

When trying again after a mechanism-specific error, we should send the
KDC cookie for conformance with RFC 6113.

https://github.com/krb5/krb5/commit/25f12e90d98b677d0a72893b3c6eb859377aee68
Author: Greg Hudson <ghudson@mit.edu>
Commit: 25f12e90d98b677d0a72893b3c6eb859377aee68
Branch: master
src/lib/krb5/krb/preauth2.c | 8 +++++++-
src/tests/t_pkinit.py | 6 ++++--
2 files changed, 11 insertions(+), 3 deletions(-)

# Sun Sep 24 20:40:01 2017 ghudson@mit.edu (Greg Hudson) - Status changed from 'review' to 'resolved'

# Wed Oct 04 10:52:57 2017 ghudson@mit.edu (Greg Hudson) - Version_Fixed 1.16 added