[DIRKRB-631] Not compatible with MIT Kerberos 1.11+

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.0.0-RC2, 1.0.0
• Fix Version/s: 1.0.1
• Environment: Debian, Fedora
• Assignee: Jiajia Li
• Reporter: Marc de Lignie
• Created: 15/May/17 07:41
• Updated: 19/Jun/17 05:18
• Resolved: 19/Jun/17 04:55

Description

The Kerby kdc does not accept preauthication form a MIT Kerberos client starting from version 1.11. V1.11 hallmarks the implementation of the FAST OTP standard in MIT Kerberos, apparently with changes not understood by Kerby.
More details on stacktraces are available from:
http://mail-archives.apache.org/mod_mbox/directory-kerby/201705.mbox/browser
A failing test is available from:
https://github.com/vtslab/directory-kerby/tree/MitIssue

Without an update on Mit Kerberos compatibility Directory Kerby is not usable for testing kerberos functionality in Apache TInkerpop's gremlin-python module (the more so because the Mit Kerberos 1.10 source distribution does not compile anymore with the gcc-5.x from recent LTS Linux distributions).

Issue Links

• is duplicated by: DIRKRB-614 Kerby (simplekdc) fails to handle unknown PADATA