Bug 2072059 - libkrad does not allow RADIUS attribute values with length above 125 characters
Summary: libkrad does not allow RADIUS attribute values with length above 125 characters
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: krb5
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Alexander Bokovoy
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-04-05 14:00 UTC by Alexander Bokovoy
Modified: 2022-06-16 06:19 UTC (History)
7 users (show)

Fixed In Version: krb5-1.19.2-6.fc35 krb5-1.19.2-5.fc34 krb5-1.19.2-9.fc36 krb5-1.19.2-11.fc37
Clone Of:
Environment:
Last Closed: 2022-04-07 15:26:22 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker FREEIPA-8131 0 None None None 2022-04-05 14:06:10 UTC

Description Alexander Bokovoy 2022-04-05 14:00:55 UTC
Allow use of larger RADIUS attributes in krad library

commit f35077bfc570205092eca2a9d44e50ce265622f4
Author: Sumit Bose <sbose>
Date:   Mon Nov 8 17:48:50 2021 +0100
    
        In kr_attrset_decode(), explicitly treat the length byte as unsigned.
        Otherwise attributes longer than 125 characters will be rejected with
        EBADMSG.
    
        Add a 253-character-long NAS-Identifier attribute to the tests to make
        sure that attributes with the maximal number of characters are working
        as expected.
    
        [ghudson: used uint8_t cast per current practices; edited
        commit message]
    
        ticket: 9036 (new)
    
From upstream, needed in preparation for OAuth2 support for FreeIPA and SSSD.
    
https://github.com/krb5/krb5/pull/1229 was merged upstream but only available in MIT Kerberos 1.20 beta1 which we currently cannot package in Fedora (it breaks FreeIPA, port is underway).

Comment 1 Sumit Bose 2022-04-05 14:45:02 UTC
Hi,

please add the related patches from https://github.com/krb5/krb5/pull/1230 as well, see discussion in https://github.com/krb5/krb5/pull/1229.

Thanks.

bye,
Sumit

Comment 2 Fedora Update System 2022-04-05 19:43:14 UTC
FEDORA-2022-e3ba1fca4d has been submitted as an update to Fedora 36. https://bodhi.fedoraproject.org/updates/FEDORA-2022-e3ba1fca4d

Comment 3 Fedora Update System 2022-04-05 19:44:55 UTC
FEDORA-2022-060defb1b3 has been submitted as an update to Fedora 35. https://bodhi.fedoraproject.org/updates/FEDORA-2022-060defb1b3

Comment 4 Fedora Update System 2022-04-05 19:48:19 UTC
FEDORA-2022-92087bf4a6 has been submitted as an update to Fedora 34. https://bodhi.fedoraproject.org/updates/FEDORA-2022-92087bf4a6

Comment 5 Fedora Update System 2022-04-06 17:54:21 UTC
FEDORA-2022-e3ba1fca4d has been pushed to the Fedora 36 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2022-e3ba1fca4d`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-e3ba1fca4d

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 6 Fedora Update System 2022-04-06 19:10:22 UTC
FEDORA-2022-92087bf4a6 has been pushed to the Fedora 34 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2022-92087bf4a6`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-92087bf4a6

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 7 Fedora Update System 2022-04-06 19:48:11 UTC
FEDORA-2022-060defb1b3 has been pushed to the Fedora 35 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2022-060defb1b3`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-060defb1b3

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 8 Fedora Update System 2022-04-07 15:26:22 UTC
FEDORA-2022-060defb1b3 has been pushed to the Fedora 35 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 9 Fedora Update System 2022-04-13 15:48:43 UTC
FEDORA-2022-92087bf4a6 has been pushed to the Fedora 34 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 10 Fedora Update System 2022-05-07 04:11:41 UTC
FEDORA-2022-e3ba1fca4d has been pushed to the Fedora 36 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 11 Fedora Update System 2022-06-16 06:17:34 UTC
FEDORA-2022-4ab4a17207 has been submitted as an update to Fedora 37. https://bodhi.fedoraproject.org/updates/FEDORA-2022-4ab4a17207

Comment 12 Fedora Update System 2022-06-16 06:19:29 UTC
FEDORA-2022-4ab4a17207 has been pushed to the Fedora 37 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.