BUG: kinit coredumps when changing expired password, potentially kpasswd as well

2002-02-13 Thread Alistair Mackay
src/windows/cns/kpasswd/c line 82 And possibly in the macro SAMDATA in src/lib/krb5/krb/preauth2.c line 220 ...though unless it breaks for me, I can't be bothered to pick apart the macro :-) Regards, Alistair Mackay (Has also been posted to [EMAIL PROTECTED]) __

Workaround: telnet core dumps with Windows 2000 KDC

2002-03-13 Thread Alistair Mackay
Category: krb5-appl Release:krb5-1.2.3 Description: When using MIT kerberos against a Windows 2000 KDC, obtaining a TGT for a user that is a member of many Windows groups causes the Authorization-Data field of the TGT to become very large. Microsoft uses this fiel

PATCH: krb5-1.2.4 Set security on file cache in NT/2000

2002-04-22 Thread Alistair Mackay
All, The following patch affords NTFS security on a file cache should you choose to use one (to get Oracle 8 to talk to MIT in NT, file caching is the only way). The way it's set up now sets read/write access to the owner of the process creating the cache file (ie by running Leash or kinit) and

Re: PATCH: krb5-1.2.4 Set security on file cache in NT/2000

2002-04-23 Thread Alistair Mackay
I shouldn't think so. File system security can only be set on NTFS volumes. AFAIK the security API's are present in Win9x, but do nothing and probably return an error. There should perhaps be a version check at the beginning (by calling GetVersion()) which causes the function to do nothing and ret