krb5 enhancement update

Updated krb5-workstation packages which reduce potential stalls in the
rsh client and server and correctly handle login passwords more than eight
characters long are now available.

Kerberos 5 is a networked authentication system in which clients and
servers authenticate to each other using symmetric keys and a trusted third
party.

The krb5-workstation package contains modified versions of the standard rsh
and telnet clients and servers which make use of Kerberos for
authentication and which optionally provide encryption of data which is
sent over the network.

In situations where the rsh client and server are both attempting to send
large amounts of data over the network at the same time, it is possible for
both processes to block while waiting for the other to receive data.

When falling back to password-based authentication, login would incorrectly
compute the hash of a user's password if it was more than eight characters
long and deny access.

The ksu application was previously installed without the setuid bit set.

Users are advised to upgrade to these updated packages, which incorporate
changes which should reduce the likelihood of these occurrences.

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

174782 - Telnet Daemon provided by krb5-workstation does not process logins with passwords longer then 8 Characters

krb5, ksu, login, password, rsh, rshd