Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!usc!cs.utexas.edu!ut-emx!tivoli!mukund
From: mukund@tivoli.UUCP (mukund)
Newsgroups: comp.protocols.kerberos
Subject: kdb_verify_master_key
Keywords: kdb_verify_master_key, strange code
Message-ID: <782@tivoli.UUCP>
Date: 28 May 91 16:25:55 GMT
Organization: Tivoli Systems Inc., Austin, TX
Lines: 33



In Version 4 : admin/kdb_edit.c

kdb_verify_master_key(master_key, master_key_schedule, stdout)
static C_Block master_key;
static Key_schedule master_key_schedule;
FILE	*stdout;

Now change the last argument to (FILE *)NULL ,and even if the
master password does not verify, the routine returns the master
key version (> 1) and all is well.

The problem seems to be in the following bit of code
in kdb_verify_master_key(..)


>if (n && (out != (FILE *) NULL)) {
>    fprintf(out, gettxt("\n\07\07verify_master_key: Invalid master key; 
> does not match database.\n"));
>   return (-1);
>  }

Comments ???

I have seen some wierd stuff in version 5 but this takes the cake.

---Mukund
__________________________________________________________
Mukund Belliappa		mukund@tivoli.com
Tivoli systems Inc.
Austin Texas.
(512)794-9070