[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Incompatibility between latest snapshot and version 0.6




Alf Wachsmann <alfw@SLAC.Stanford.EDU> writes:

> The problem seems to have to do with the new OpenSSL but I am not sure.
>
> Is there a way to make the new Heimdal client binaries (all, not just
> kinit) work with a Heimdal-0.6 kdc?

I use heimdal current with 0.6 and can't reproduce the error.

It seems that the des enctypes are not part of the list of supported
enctypes, can you put a breakpoint in add_enc_ts_padata and see if that
indeed is the problem.

Love


: lha@nutcracker ; gdb -q /usr/heimdal/bin/kinit 
(gdb) b add_enc_ts_padata
Breakpoint 1 at 0x805ad08: file /home/lha/src/cvs/heimdal/lib/krb5/init_creds_pw.c, line 934.
(gdb) r
Starting program: /usr/heimdal/bin/kinit 
lha@E.KTH.SE's Password: 

Breakpoint 1, add_enc_ts_padata (context=0x808e000, md=0x808ff10, 
    client=0x808fdf0, key_proc=0x8059abc <default_s2k_func>, 
    keyseed=0xbfbff0a0, enctypes=0x808d760, netypes=5, salt=0x0, s2kparams=0x0)
    at /home/lha/src/cvs/heimdal/lib/krb5/init_creds_pw.c:934
934         if(salt == NULL) {
(gdb) n
936             ret = krb5_get_pw_salt (context, client, &salt2);
(gdb) 
937             salt = &salt2;
(gdb) 
939         if (!enctypes) {
(gdb) 
946         for (i = 0; i < netypes; ++i) {
(gdb) p enctypes[0]@netypes
$1 = {ETYPE_AES256_CTS_HMAC_SHA1_96, ETYPE_ARCFOUR_HMAC_MD5, 
  ETYPE_DES3_CBC_SHA1, ETYPE_DES_CBC_MD5, ETYPE_DES_CBC_CRC}

PGP signature