Skip to content

Conversation

@SteveSyfuhs
Copy link
Collaborator

What's the problem?

S4U is incorrectly caching and using S4U'ed tickets, meaning the wrong ticket can get selected.

  • Bugfix
  • New Feature

What's the solution?

Don't cache or check the cache for S4U tickets.

  • Includes unit tests
  • Requires manual test

What issue is this related to, if any?

Fixed #248

@marcelhintermann
Copy link

Godlike 💕
Fastest resolution ever!

I'm not very deep in the topic, but isn't it possible to cache S4U tickets?

@SteveSyfuhs SteveSyfuhs merged commit b2f6ec1 into develop Jun 2, 2021
@SteveSyfuhs SteveSyfuhs deleted the bugfix/dont-cache-s4u branch June 2, 2021 20:53
@SteveSyfuhs
Copy link
Collaborator Author

It requires a significant overhaul of the cache mechanism, which isn't necessarily a bad idea, but it's quite a bit of work. Most other libraries actually don't cache S4U either.

@marcelhintermann
Copy link

Thanks for the fast fix. I can confirm that it works now as intended.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

KerberosClient Cache returns ticket of another user

3 participants