projects / krb5.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 892ad7d) | patch
Ignore improperly encoded signedpath AD elements
authorGreg Hudson <ghudson@mit.edu>
Fri, 5 Mar 2010 17:45:46 +0000 (17:45 +0000)
committerGreg Hudson <ghudson@mit.edu>
Fri, 5 Mar 2010 17:45:46 +0000 (17:45 +0000)
commitf58cc5a2589e1589ff17c0057ff5da97cac834d7
tree004d56ab1c80e3df5f1bb226573b0e0f79d31fd3tree | snapshot
parent892ad7d0d8eaa73a22d01f4c07dfe3a8df4da02acommit | diff
Ignore improperly encoded signedpath AD elements

We have some reason to believe Microsoft and Heimdal are both using
the authdata value 142 for different purposes, leading to failures in
verify_ad_signedpath().  For better interoperability, treat such
tickets as unsigned, rather than invalid.

ticket: 6676
target_version: 1.8.1
tags: pullup

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@23766 dc483132-0cff-0310-8789-dd5450dbe970
src/kdc/kdc_authdata.c diff | blob | history
MIT implementation of the Kerberos network authentication protocol. This repo may be rebased, so don't base your work on it. Use git://github.com/krb5/krb5 instead.