Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 27 Dec 2023 14:39:10 +0000
From:      bugzilla-noreply@freebsd.org
To:        bugs@FreeBSD.org
Subject:   [Bug 275915] kadmin(d): adding principal crashes in ARCFOUR_string_to_key
Message-ID:  <bug-275915-227-XJNA71ppx2@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-275915-227@https.bugs.freebsd.org/bugzilla/>
References:  <bug-275915-227@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D275915

--- Comment #2 from Lexi Winter <lexi.freebsd@le-fay.org> ---
Created attachment 247295
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D247295&action=
=3Dedit
patch

well, this patch fixes the crash in kadmin/kadmind by returning an error
instead:

kadmin> add -r host/test.example.org@EXAMPLE.ORG
Max ticket life [1 day]:
Max renewable life [1 week]:
Principal expiration time [never]:
Password expiration time [never]:
Attributes []:
kadmin: kadm5_create_principal: Cannot create digest
kadmin: adding host/test.example.org@EXAMPLE.ORG: Cannot create digest
kadmin>

it doesn't fix the underlying issue with MD4 not being available. the defau=
lt
default_keys should probably be updated to remove arcfour-hmac-md5, since
almost nothing requires this nowadays (including Windows).

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-275915-227-XJNA71ppx2>