Love Hörnquist Åstrand ba2127c788 The "kaserver" part of Heimdal occasionally issues invalid AFS tokens
(here "occasionally" means for certain users in certain realms).

In lib/krb5/v4_glue.c, in the routine storage_to_etext the ticket is
padded to a multiple of 8 bytes. If it is already a multiple of 8
bytes, 8 additional 0-bytes are added.

This catches the AFS krb4 ticket decoder by surprise: unless the
ticket is exactly 56 bytes, it only supports the minimum necessary
padding.  It detects the superfluous padding by comparing the ticket
length decoded to the advertised ticket length.

Hence a 7-letter userid in "cern.ch" which resulted in a ticket of 40
bytes, got "padded" to 48 bytes which the rxkad decoder rejected.

From Rainer Toebbicke.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23475 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-07-28 15:01:05 +00:00
2008-06-23 04:32:32 +00:00
x
2008-07-15 11:26:00 +00:00
2008-07-27 12:18:48 +00:00
2008-07-26 18:41:49 +00:00
2008-06-23 04:32:32 +00:00
2008-04-07 18:51:23 +00:00
2008-06-23 04:32:32 +00:00
2008-07-26 18:28:07 +00:00
2008-04-18 06:33:03 +00:00
2008-07-26 18:39:59 +00:00
2008-02-03 17:41:51 +00:00
2004-02-12 14:19:16 +00:00
2006-12-15 21:15:45 +00:00
x
2008-07-26 18:29:42 +00:00
2000-06-07 10:01:25 +00:00
2002-08-21 13:29:08 +00:00
2003-03-25 12:52:46 +00:00
2004-01-18 22:48:48 +00:00
2005-01-01 14:50:47 +00:00
2006-01-01 23:18:02 +00:00
2007-01-02 09:07:43 +00:00
2008-04-09 13:32:18 +00:00
2008-05-05 16:25:44 +00:00
1998-08-14 12:05:21 +00:00
2008-02-08 18:32:04 +00:00
2008-01-21 12:12:23 +00:00
x
2008-05-02 08:35:31 +00:00
2000-07-27 02:33:54 +00:00
x
2007-12-07 02:53:20 +00:00

$Id$

Heimdal is a Kerberos 5 implementation.

Please see the manual in doc, by default installed in
/usr/heimdal/info/heimdal.info for information on how to install.
There are also briefer man pages for most of the commands.

Bug reports and bugs are appreciated, see more under Bug reports in
the manual on how we prefer them.

For more information see the web-page at
<http://www.pdc.kth.se/heimdal/> or the mailing lists:

heimdal-announce@sics.se	low-volume announcement
heimdal-discuss@sics.se		high-volume discussion

send a mail to heimdal-announce-request@sics.se and
heimdal-discuss-request@sics.se respectively to subscribe.
Languages
C 92.1%
Roff 2.8%
Shell 2.3%
Makefile 0.7%
M4 0.5%
Other 1.4%