[Bug 723840] Re: krb5-1.8 fails to verify MS PAC Checksum when AES 256 is used

[Rolf Leggewie]

lucid has seen the end of its life and is no longer receiving any
updates. Marking the lucid task for this ticket as "Won't Fix".

** Changed in: krb5 (Ubuntu Lucid)
       Status: New => Won't Fix

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to krb5 in Ubuntu.
https://bugs.launchpad.net/bugs/723840

Title:
  krb5-1.8 fails to verify MS PAC Checksum when AES 256 is used

Status in krb5 package in Ubuntu:
  Fix Released
Status in krb5 source package in Lucid:
  Won't Fix
Status in krb5 package in Debian:
  Fix Released

Bug description:
  Binary package hint: libkrb5-3

  libkrb5-3 in Lucid does not work properly when mediating between a
  Windows 7 client and a 2008R2 KDC after applying MS hotfix KB2425227.

  The bug has been reported previously here:
  http://mailman.mit.edu/pipermail/krbdev/2010-July/009148.html

  And here:
  http://www.mail-archive.com/squid-users@squid-cache.org/msg75789.html

  However, it's only since the MS hotfix that it has become a problem
  for us.

  Basically, the bug has been fixed in libkrb5-3 version 1.8.3, so all
  you have to do is update the package.

  I'm guessing you're going to get a lot more bug reports on this, trust
  MS to keep changing the goal posts and making our jobs harder.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/krb5/+bug/723840/+subscriptions