OpenAFS Master Repository branch, master, updated. openafs-devel-1_9_2-354-g9e7ce41
Gerrit Code Review
gerrit@openafs.org
Thu, 30 Oct 2025 10:29:59 -0400
The following commit has been merged in the master branch:
commit 9e7ce415093b9f6758c03fa00ef9aba604a4f925
Author: Marcio Barbosa <mbarbosa@sinenomine.net>
Date: Mon Oct 27 17:55:39 2025 +0000
libafscp: Support non-DES user credential keys
Extend libafscp to support rxkad_krb5 keys when using the currently
logged-in user's Kerberos credentials.
Previously, only ENCTYPE_DES_CBC_CRC was supported, which prevented use
of credentials with stronger encryption types.
To address this, _GetSecurityObject() now calls tkt_DeriveDesKey(),
which derives a DES key from the session key in the user's credential,
regardless of its original encryption type. This allows libafscp to
interoperate with tickets using modern encryption algorithms while
maintaining compatibility with existing DES-based logic.
Change-Id: If3981418a1d05cdd68e51b23fc1cc7067dc19bbc
Reviewed-on: https://gerrit.openafs.org/16595
Tested-by: BuildBot <buildbot@rampaginggeek.com>
Reviewed-by: Marcio Brito Barbosa <mbarbosa@sinenomine.net>
Reviewed-by: Michael Meffie <mmeffie@sinenomine.net>
Reviewed-by: Cheyenne Wills <cwills@sinenomine.net>
Reviewed-by: Andrew Deason <adeason@sinenomine.net>
src/libafscp/afscp_util.c | 16 ++++++++++++++--
1 file changed, 14 insertions(+), 2 deletions(-)
--
OpenAFS Master Repository