PSARC 2010/135 Kerberos Diagnostic Enhancements (umbrella case)
6835328 Error messages generated by applications using RPCSEC_GSS are too vague

6908114 Kerberos integer underflow bugs in AES and RC4 decryption [MITKRB5-SA-2009-004]

6885561 Unable to verify PAC server's signature in Windows 2008 domain w/ 2003 domain functional level

PSARC 2009/418 Kerberos V5 PAC API
6283931 SPNEGO needs to follow latest RFC
6808598 krb5 APIs needed to create and parse PAC data
6817447 libgss and various mechs are hiding both the real minor_stat

PSARC 2009/418 Kerberos V5 PAC API
6283931 SPNEGO needs to follow latest RFC
6808598 krb5 APIs needed to create and parse PAC data
6817447 libgss and various mechs are hiding both the real minor_status and the error token

show more ...

6525327 kinit failed when arcfour-hmac-md5-exp was used for the principal's key

6837512 krb5.h C++ guards are wrong

6777148 idmap fails to auto-discover AD due to ldap_sasl_bind failure

PSARC/2008/631 Kerberos PKINIT
PSARC/2008/358 removal of kadm5.keytab
6698059 Resync with mit 1.6.3 (pkinit)
6749302 pam_krb5 auth fails with key table entry not found

PSARC 2008/366 VSW_CANLOFI
6709611 PSARC 2008/366 VSW_CANLOFI

6523785 kerberos unseal from buggy client causes a core
6663377 krb5int_dns_init() doesn't initialize __res_state structure
6704617 kclient needs cleanup and occasionally hangs during join when a DC

6523785 kerberos unseal from buggy client causes a core
6663377 krb5int_dns_init() doesn't initialize __res_state structure
6704617 kclient needs cleanup and occasionally hangs during join when a DC is down within the domain

show more ...

6245750 kadmin "Bad encryption type" error should state the enctype
6658621 Configuration checks for kerberos daemons should be done by the daemons themselves
6658624 Missing error strings for new ke

6245750 kadmin "Bad encryption type" error should state the enctype
6658621 Configuration checks for kerberos daemons should be done by the daemons themselves
6658624 Missing error strings for new kerberos DB error types
6658627 kpropd should use its executable name and not the full path when logging error messages
6658631 error messages in kerberos deamons need cleanup
6664832 various memleaks in krb libs

show more ...

6548599 AES encrypt function in kmech_krb5 is broken for 16 byte input, causes NFSsec interop problems

PSARC 2007/335 kdcmgr utility
6231080 Solaris Kerberos needs a cmdline utility to auto-configure a master/slave KDC
6588844 gkadmin's help file uses user-visible SCCS keywords
6596185 kadmin negates

PSARC 2007/335 kdcmgr utility
6231080 Solaris Kerberos needs a cmdline utility to auto-configure a master/slave KDC
6588844 gkadmin's help file uses user-visible SCCS keywords
6596185 kadmin negates -allow_tix when adding a principal record
6598545 Client key decrypt receives bad integrity check when master key is AES*

show more ...

6573019 mit 1.4 sub-glue layer resync (fix cstyle)

6573019 mit 1.4 sub-glue layer resync

PSARC/2006/277 Support for Kerberos Records in LDAP Directory
6399903 Support for Kerberos Records in LDAP Directory
6520554 MIT bug #5427 with krb5_kt_get_name()
6597851 dmake lint in usr/src/lib/gs

PSARC/2006/277 Support for Kerberos Records in LDAP Directory
6399903 Support for Kerberos Records in LDAP Directory
6520554 MIT bug #5427 with krb5_kt_get_name()
6597851 dmake lint in usr/src/lib/gss_mechs/mech_krb5 broken

show more ...

PSARC/2006/690 Kerberos client configuration improvements
6496710 enable dns_lookup_kdc by default
6499339 krb zero conf needs better realm lookup logic
6523887 krb should support client side referra

PSARC/2006/690 Kerberos client configuration improvements
6496710 enable dns_lookup_kdc by default
6499339 krb zero conf needs better realm lookup logic
6523887 krb should support client side referrals
6528391 krb5.conf should not be delivered in a misconfigured state

show more ...

6455532 OSNet cleanup required in preparation for direct bindings

6440682 mech_krb5 should make fewer calls to PKCS#11 for AES
6549922 krb build broken when -DDEBUG used

6217259 A sun4u specific kmech_krb5 is unnecessary

6455242 nightly should be able to preserve all proto areas from a single build.
6467531 nightly(1) needs option to generate OpenSolaris delivery

6475878 nss2 Memleak test suite may have exposes a mech_krb5 Memleak
6534935 Potential memory leak within libkadm5clnt.so.1 if out of memory condition occurs.

4854431 krb5_gss_acquire_cred() does not implement correct GSS_C_NO_NAME semantics
6290693 krb mech isn't doing the right thing in regards to gss_delete_sec_context and the output token
6491792 gss_u

4854431 krb5_gss_acquire_cred() does not implement correct GSS_C_NO_NAME semantics
6290693 krb mech isn't doing the right thing in regards to gss_delete_sec_context and the output token
6491792 gss_unwrap() is causing duplicate token detection to fail for subsequent calls to gss_unwrap()

show more ...

PSARC 2006/424 Kerberos 1.4 KDC Resync
6406993 kdc and client resync with MIT 1.4

PSARC 2006/027 Open Kerberos APIs
6381288 we should expose the krb5 api