[
https://issues.apache.org/jira/browse/DIRKRB-472?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15021828#comment-15021828
]
Kai Zheng commented on DIRKRB-472:
----------------------------------
In current codes, when running Kerby client -> MIT KDC, it will throw:
{noformat}
Exception in thread "main" org.apache.kerby.kerberos.kerb.KrbException:
Integrity check on decrypted field failed
at
org.apache.kerby.kerberos.kerb.crypto.enc.KeKiEnc.decryptWith(KeKiEnc.java:127)
at
org.apache.kerby.kerberos.kerb.crypto.enc.AbstractEncTypeHandler.decrypt(AbstractEncTypeHandler.java:150)
at
org.apache.kerby.kerberos.kerb.crypto.enc.AbstractEncTypeHandler.decrypt(AbstractEncTypeHandler.java:138)
at
org.apache.kerby.kerberos.kerb.crypto.EncryptionHandler.decrypt(EncryptionHandler.java:244)
at
org.apache.kerby.kerberos.kerb.common.EncryptionUtil.unseal(EncryptionUtil.java:136)
at
org.apache.kerby.kerberos.kerb.client.request.TgsRequest.processResponse(TgsRequest.java:82)
at
org.apache.kerby.kerberos.kerb.client.KrbHandler.onResponseMessage(KrbHandler.java:113)
at
org.apache.kerby.kerberos.kerb.client.impl.DefaultKrbHandler.handleRequest(DefaultKrbHandler.java:47)
at
org.apache.kerby.kerberos.kerb.client.impl.DefaultInternalKrbClient.doRequestServiceTicket(DefaultInternalKrbClient.java:86)
at
org.apache.kerby.kerberos.kerb.client.impl.AbstractInternalKrbClient.requestServiceTicket(AbstractInternalKrbClient.java:139)
at
org.apache.kerby.kerberos.kerb.client.KrbClient.requestServiceTicketWithTgt(KrbClient.java:267)
at
org.apache.kerby.kerberos.tool.kinit.KinitTool.requestTicket(KinitTool.java:161)
at
org.apache.kerby.kerberos.tool.kinit.KinitTool.main(KinitTool.java:229)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at com.intellij.rt.execution.application.AppMain.main(AppMain.java:140)
{noformat}
> Use sessionkey or subkey appropriately
> --------------------------------------
>
> Key: DIRKRB-472
> URL: https://issues.apache.org/jira/browse/DIRKRB-472
> Project: Directory Kerberos
> Issue Type: Bug
> Reporter: Kai Zheng
> Assignee: Kai Zheng
>
> It looks like we need to revisit related codes across client and server to
> ensure session key or subkey is used appropriately. The changes should make
> both MIT Kerberos and Oracle Java happy conforming to the spec.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
