c2e68593a5
At least Windows KDCs return KRB5KRB_AP_ERR_SKEW without edata in response to TGS-REQ. This ensures the callers see the KRB5KRB_AP_ERR_SKEW error and not KRB5_KDCREP_MODIFIED "FAST fast response is missing FX-FAST". For the response to an amored AS-REQ, we'll now return KRB5KRB_AP_ERR_MODIFIED instead of KRB5_KDCREP_MODIFIED, but if there's an attack the exact error code doesn't matter. BUG: https://bugzilla.samba.org/show_bug.cgi?id=15676 Pair-Programmed-With: Stefan Metzmacher <metze@samba.org> Signed-off-by: Ralph Boehme <slow@samba.org> Signed-off-by: Stefan Metzmacher <metze@samba.org>
Heimdal
Heimdal is an implementation of:
- ASN.1/DER,
- PKIX, and
- Kerberos.
For information how to install see here.
There are man pages for most of the commands.
Bug reports and bugs are appreciated. Use GitHub issues.
For more information see the project homepage https://heimdal.software/heimdal/ or the mailing lists:
heimdal-announce@heimdal.software low-volume announcement heimdal-discuss@heimdal.software high-volume discussion
send mail to heimdal-announce-subscribe@heimdal.software and heimdal-discuss-subscribe@heimdal.software respectively to subscribe.
Build Status