[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: preauth requires DES3 keys???

To: "Brandon S. Allbery KF8NH" <allbery@kf8nh.apk.net>
Subject: Re: preauth requires DES3 keys???
From: Assar Westerlund <assar@sics.se>
Date: 17 Apr 1999 23:34:23 +0200
Cc: heimdal-discuss@sics.se
In-Reply-To: "Brandon S. Allbery KF8NH"'s message of "Sat, 17 Apr 1999 11:05:30 -0400"
References: <199904171505.LAA24469@rushlight.kf8nh.apk.net>
Sender: owner-heimdal-discuss@sics.se

"Brandon S. Allbery KF8NH" <allbery@kf8nh.apk.net> writes:
> The notable thing is that the only enctype searched for is des3-cbc-sha1.
> This is something of a problem given that the current KDC database is
> composed entirely of keys extracted from the kaserver.DB0 for the
> test5.ece.cmu.edu cell... no way to stuff des3 keys in there.  Shouldn't
> there be some provision to fall back to other enctypes?

I think this is caused by lib/krb5/get_in_tkt.c:init_as_req() just
trying the first etype.

/assar

References:
- preauth requires DES3 keys???
  - From: "Brandon S. Allbery KF8NH" <allbery@kf8nh.apk.net>

Prev by Date: Re: Some suggestions for the next iteration of heimdal
Next by Date: Re: heimdal 0.1d patches: verbose hprop -K, kaserver switch, keytab fallback
Prev by thread: Re: preauth requires DES3 keys???
Next by thread: heimdal 0.1d patches: verbose hprop -K, kaserver switch, keytab fallback
Index(es):
- Date
- Thread