As found in etc/afpd/auth.c, around line 1430:
q = (char *)rpkt.dat;
*p++ = *q++;
*p++ = *q++;
while ( *q++ )
;
while ( *q++ )
;
while ( *q++ )
;
q += 10;
len = strlen( realm );
strcpy( p, realm );
p += len + 1;
bcopy( q, &slen, sizeof( short ));
bcopy( &slen, p, sizeof( short ));
p += sizeof( short );
q += sizeof( short );
bcopy( q, p, slen );
p += slen;
This manages to produce complete garbage, probably because it doesn't seem to
decode what our Kerberos server considers a ticket, and afpd cores on the
final bcopy() as a result. What exactly is afpd trying to extract from the
ticket? (Or equivalently, "what ticket format is it looking for?")
--
brandon s. allbery [os/2][linux][solaris][japh] [EMAIL PROTECTED]
system administrator [WAY too many hats] [EMAIL PROTECTED]
electrical and computer engineering KF8NH
carnegie mellon university ["God, root, what is difference?" -Pitr]