[Heimdal-source-changes] [heimdal/heimdal] a3fd75: hdb: generate default salts for entries missing th...

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/heimdal/heimdal
  Commit: a3fd75f368c0f22482d87d97b98e66e6fc3ffd21
      https://github.com/heimdal/heimdal/commit/a3fd75f368c0f22482d87d97b98e66e6fc3ffd21
  Author: Luke Howard <lukeh at padl.com>
  Date:   2019-01-07 (Mon, 07 Jan 2019)

  Changed paths:
    M lib/hdb/common.c

  Log Message:
  -----------
  hdb: generate default salts for entries missing them

Older databases may lack explicitly stored salts where the salt is the default
one. When fetching a client entry for an AS-REQ, add default salts to keys that
lack one.


  Commit: de1f37a6aadb35fdce3254528d89bdac23fb120b
      https://github.com/heimdal/heimdal/commit/de1f37a6aadb35fdce3254528d89bdac23fb120b
  Author: Luke Howard <lukeh at padl.com>
  Date:   2019-01-07 (Mon, 07 Jan 2019)

  Changed paths:
    M kdc/kerberos5.c
    M kdc/krb5tgs.c

  Log Message:
  -----------
  kdc: omit default salt from PA-ETYPE-INFO[2]

If the salt for the AS-REP client key matches the default password salt for the
client principal in the AS-REQ, then it can be omitted from the PA-ETYPE-INFO,
PA-ETYPE-INFO2 (RFC4120) as the client will assume the default salt in its
absence.


Compare: https://github.com/heimdal/heimdal/compare/828ddecd6134...de1f37a6aadb
      **NOTE:** This service has been marked for deprecation: https://developer.github.com/changes/2018-04-25-github-services-deprecation/

      Functionality will be removed from GitHub.com on January 31st, 2019.