[PATCH] heimdal - avoid an endless loop when KDC replies KRB5KDC_ERR_SVC_UNAVAILABLE

Andrew Bartlett abartlet at samba.org
Tue Jun 16 23:04:40 MDT 2015


On Tue, 2015-06-16 at 08:24 +0300, Uri Simchoni wrote:
> I tried avoiding THIS discussion by also submitting it upstream.
> Looking at the upstream heimdal code:
> - The bug seems to no longer exist (there's no nesting like here)
> - The send code is a rewrite, making me uncomfortable in back-porting
> it as a fix to this particular problem.
> - When reviewing upstream heimdal code I did find a tiny bug of
> swapped debug prints (print success in case of failure and vice versa)
> but did not manage to submit it to the heimdal-discuss mailing list as
> the web server that manages subscriptions to the list (list.sics.se)
> appears to be dead.
> 
> I hope the comments in the commit message about the upstream fix will
> help in pulling back a newer heimdal. Everyone are invited to review
> upstream Heimdal code to verify that indeed the problem is fixed.

Thanks, that's all I need as information when updating Heimdal.

I'm working on the update when I get time.  

Andrew Bartlett

-- 
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team         http://samba.org
Samba Development and Support, Catalyst IT   http://catalyst.net.nz/services/samba








More information about the samba-technical mailing list