[Bug 456] New: Krb5 ticket forwarding is tryied even if krb5 authentication failed

[bugzilla-daemon at mindrot.org]

http://bugzilla.mindrot.org/show_bug.cgi?id=456

           Summary: Krb5 ticket forwarding is tryied even if krb5
                    authentication failed
           Product: Portable OpenSSH
           Version: -current
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P2
         Component: sshd
        AssignedTo: openssh-unix-dev at mindrot.org
        ReportedBy: kouril at ics.muni.cz


The client should forward krb5 ticket to the server only if krb5 authentication
was done. Otherwise the krb5 session keys are not set properly and creating of
the  credentials to delegate fails. Likewise, the server should accept
delegation of krb5 ticket only if the client has authenticated by means of krb5.
Current code coredumps (both client and server) without this patch.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.