[CSHARP-836] GSSAPI Authentication doesn't respect the package's MaxTokenSize Created: 03/Oct/13  Updated: 02/Apr/15  Resolved: 30/Oct/13

Status: Closed
Project: C# Driver
Component/s: None
Affects Version/s: 1.8, 1.8.1, 1.8.2
Fix Version/s: 1.9

Type: Bug Priority: Major - P3
Reporter: Craig Wilson Assignee: Craig Wilson
Resolution: Done Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Depends

 Description   

Extraordinarily large users (members of a large number of AD groups) cannot authenticate via Kerberos because the buffers we allocate are too small. Security packages in Windows have a default max token size of 12k bytes which we have hardcoded. This has changed in Windows 2012 to 48k bytes. In addition, it is possible for users to change the MaxTokenSize in their registry. As such, we should be querying the kerberos package info for this value.



 Comments   
Comment by auto [ 22/Oct/13 ]

Author:

{u'username': u'craiggwilson', u'name': u'Craig Wilson', u'email': u'craiggwilson@gmail.com'}

Message: CSHARP-836: use the system's defined kerberos max token size instead of a hard-coded value.
Branch: v2.0
https://github.com/mongodb/mongo-csharp-driver/commit/2534beab55591a95a53d633a5d1bb59d872a7368

Comment by auto [ 21/Oct/13 ]

Author:

{u'username': u'craiggwilson', u'name': u'Craig Wilson', u'email': u'craiggwilson@gmail.com'}

Message: CSHARP-836: grab max token size from the kerberos package instead of using a hard-coded value.
Branch: master
https://github.com/mongodb/mongo-csharp-driver/commit/373ff1c0df73369fd40b75e047b4e2a5fd9088fc

Generated at Wed Feb 07 21:37:58 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.