directory-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Emmanuel Lecharny <>
Subject Issues with the Keberos codec
Date Mon, 15 Nov 2010 23:18:34 GMT

the way we decode the Kerberos is not good, as I said in a previous mail. We
can't process a fragmented PDU.

I suggested that we manipulate the State in order to pick the right
container, but this is really too complex, and brittle.

I have one other solution :
pre-read the PDU size. As we are using TLV, the Length once read will let us
read the Value as an opaque element, then once completely read, we will be
able to process the PDU

This seems a minimal cost to get the codec working with the grammars we have

thoughts ?

Emmanuel L├ęcharny

View raw message