As found in etc/afpd/auth.c, around line 1430:

    q = (char *)rpkt.dat;
    *p++ = *q++;
    *p++ = *q++;
    while ( *q++ )
        ;
    while ( *q++ )
        ;
    while ( *q++ )
        ;
    q += 10;

    len = strlen( realm );
    strcpy( p, realm );
    p += len + 1;
    bcopy( q, &slen, sizeof( short ));
    bcopy( &slen, p, sizeof( short ));
    p += sizeof( short );
    q += sizeof( short );
    bcopy( q, p, slen );
    p += slen;

This manages to produce complete garbage, probably because it doesn't seem to 
decode what our Kerberos server considers a ticket, and afpd cores on the
final bcopy() as a result.  What exactly is afpd trying to extract from the
ticket?  (Or equivalently, "what ticket format is it looking for?")

-- 
brandon s. allbery      [os/2][linux][solaris][japh]     [EMAIL PROTECTED]
system administrator         [WAY too many hats]           [EMAIL PROTECTED]
electrical and computer engineering                                      KF8NH
carnegie mellon university            ["God, root, what is difference?" -Pitr]

Reply via email to