From: Ken Raeburn <raeburn@mit.edu>
Date: Fri, 29 Oct 1999 19:25:10 +0000 (+0000)
Subject: * dispatch.c (dispatch): Make message in lookaside case less suggestive of
X-Git-Tag: krb5-1.2-beta1~195
X-Git-Url: http://git.tremily.us/gitweb.cgi?a=commitdiff_plain;h=4343e0d35106ae3179e4e7a5daca548648a4cd89;p=krb5.git

* dispatch.c (dispatch): Make message in lookaside case less suggestive of
replay attacks, since it can result from normal packet loss causing
retransmissions.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@11889 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/src/kdc/ChangeLog b/src/kdc/ChangeLog
index d9892e55f..053fdf3b9 100644
--- a/src/kdc/ChangeLog
+++ b/src/kdc/ChangeLog
@@ -1,3 +1,9 @@
+1999-10-29  Ken Raeburn  <raeburn@mit.edu>
+
+	* dispatch.c (dispatch): Make message in lookaside case less
+	suggestive of replay attacks, since it can result from normal
+	packet loss causing retransmissions.
+
 1999-10-26  Tom Yu  <tlyu@mit.edu>
 
 	* Makefile.in: Clean up usage of CFLAGS, CPPFLAGS, DEFS, DEFINES,
diff --git a/src/kdc/dispatch.c b/src/kdc/dispatch.c
index 43b612ad5..0c30c6a33 100644
--- a/src/kdc/dispatch.c
+++ b/src/kdc/dispatch.c
@@ -49,7 +49,7 @@ dispatch(pkt, from, portnum, response)
     /* try the replay lookaside buffer */
     if (kdc_check_lookaside(pkt, from, response)) {
 	/* a hit! */
-	krb5_klog_syslog(LOG_INFO, "DISPATCH: replay found and re-transmitted");
+	krb5_klog_syslog(LOG_INFO, "DISPATCH: repeated (retransmitted?) request, resending response");
 	return 0;
     }
 #endif