Uploaded image for project: 'Directory Kerberos'
  1. Directory Kerberos
  2. DIRKRB-625

MIT Kerberos client failed to obtain ticket-granting ticket from Kerby KDC

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 1.0.0
    • Fix Version/s: 1.0.0
    • Component/s: None
    • Labels:
      None

      Description

      With exception:
      kinit: KDC reply did not match expectations while getting initial credentials

        Activity

        Hide
        coheigea Colm O hEigeartaigh added a comment -

        Jiajia Li, thanks I see it now.

        Show
        coheigea Colm O hEigeartaigh added a comment - Jiajia Li , thanks I see it now.
        Hide
        jiajia Jiajia Li added a comment -

        Hi Colm, I have pushed it.

        Show
        jiajia Jiajia Li added a comment - Hi Colm, I have pushed it.
        Hide
        coheigea Colm O hEigeartaigh added a comment -

        Did you push this fix Jiajia Li? I don't see it in github or when I do git pull.

        Show
        coheigea Colm O hEigeartaigh added a comment - Did you push this fix Jiajia Li ? I don't see it in github or when I do git pull.
        Hide
        jiajia Jiajia Li added a comment -

        Because of the wrong renew_till time.
        REF: verify_as_reply#get_in_tkt.c

        || ((request->kdc_options & KDC_OPT_RENEWABLE_OK) &&
                    !(request->kdc_options & KDC_OPT_RENEWABLE) &&
                    (as_reply->enc_part2->flags & KDC_OPT_RENEWABLE) &&
                    (request->till != 0) &&
                    (as_reply->enc_part2->times.renew_till > request->till))
        

        commit 3e6f9d0ecc25e5d5a753f9c156c9c59209bb3664
        Author: plusplusjiajia <jiajia.li@intel.com>
        Date: Wed May 3 13:49:02 2017 +0800

        DIRKRB-625 MIT Kerberos client failed to obtain ticket-granting ticket from Kerby KDC.

        Show
        jiajia Jiajia Li added a comment - Because of the wrong renew_till time. REF: verify_as_reply#get_in_tkt.c || ((request->kdc_options & KDC_OPT_RENEWABLE_OK) && !(request->kdc_options & KDC_OPT_RENEWABLE) && (as_reply->enc_part2->flags & KDC_OPT_RENEWABLE) && (request->till != 0) && (as_reply->enc_part2->times.renew_till > request->till)) commit 3e6f9d0ecc25e5d5a753f9c156c9c59209bb3664 Author: plusplusjiajia <jiajia.li@intel.com> Date: Wed May 3 13:49:02 2017 +0800 DIRKRB-625 MIT Kerberos client failed to obtain ticket-granting ticket from Kerby KDC.

          People

          • Assignee:
            jiajia Jiajia Li
            Reporter:
            jiajia Jiajia Li
          • Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:

              Development