From sudakov@sibptus.tomsk.ru  Fri Nov  7 07:49:53 2008
Return-Path: <sudakov@sibptus.tomsk.ru>
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 2A249106564A
	for <FreeBSD-gnats-submit@freebsd.org>; Fri,  7 Nov 2008 07:49:53 +0000 (UTC)
	(envelope-from sudakov@sibptus.tomsk.ru)
Received: from relay2.tomsk.ru (relay2.tomsk.ru [212.73.124.8])
	by mx1.freebsd.org (Postfix) with ESMTP id 885B58FC14
	for <FreeBSD-gnats-submit@freebsd.org>; Fri,  7 Nov 2008 07:49:52 +0000 (UTC)
	(envelope-from sudakov@sibptus.tomsk.ru)
Received: from admin.sibptus.tomsk.ru (account sudakov@sibptus.tomsk.ru [212.73.125.240] verified)
  by relay2.tomsk.ru (CommuniGate Pro SMTP 5.1.13)
  with ESMTPSA id 11296244 for FreeBSD-gnats-submit@freebsd.org; Fri, 07 Nov 2008 12:49:49 +0600
Received: (from sudakov@localhost)
	by admin.sibptus.tomsk.ru (8.13.6/8.13.6/Submit) id mA76nndI051105;
	Fri, 7 Nov 2008 12:49:49 +0600 (OMST)
	(envelope-from sudakov)
Message-Id: <200811070649.mA76nndI051105@admin.sibptus.tomsk.ru>
Date: Fri, 7 Nov 2008 12:49:49 +0600 (OMST)
From: Victor Sudakov <sudakov@sibptus.tomsk.ru>
Reply-To: Victor Sudakov <sudakov@sibptus.tomsk.ru>
To: FreeBSD-gnats-submit@freebsd.org
Cc:
Subject: Kerberos in the base system is too old
X-Send-Pr-Version: 3.113
X-GNATS-Notify:

>Number:         128668
>Category:       bin
>Synopsis:       [request] Kerberos in the base system is too old
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Fri Nov 07 07:50:03 UTC 2008
>Closed-Date:    Wed May 29 20:48:18 UTC 2013
>Last-Modified:  Wed May 29 20:48:18 UTC 2013
>Originator:     Victor Sudakov
>Release:        FreeBSD 7.0-RELEASE i386
>Organization:
AO "Svyaztransneft", SibPTUS
>Environment:
System: FreeBSD ws233.sibptus.tomsk.ru 7.0-RELEASE FreeBSD 7.0-RELEASE #0: Sun Feb 24 19:59:52 UTC 2008 root@logan.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC i386
>Description:
Kerberos in the base system is too old (0.6.3) and has bugs
which have been fixed in more recent versions of Heimdal.

>How-To-Repeat:
Try to obtain a tgt from a Microsoft domain controller and you will get:
kinit: krb5_get_init_creds: Response too big for UDP, retry with TCP

>Fix:
This bug was fixed in releases after Jun 12 2007. Heimdal 1.1 for sure.
The recent Heimdal should be imported into the base system.

>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->closed 
State-Changed-By: eadler 
State-Changed-When: Wed May 29 20:48:16 UTC 2013 
State-Changed-Why:  
this has been fixed some time ago; thanks for the PR 

http://www.freebsd.org/cgi/query-pr.cgi?pr=128668 
>Unformatted:
