Re: Auto-detecting broken arcfour-hmac code

[Love <lha@stacken.kth.se>]

Jim McDonough <jmcd@us.ibm.com> writes:

> Anyone have any ideas about detecting whether the arcfour-hmac code is
> broken, as before last week or so when the fix was put in the snapshot?
> Samba needs to know and not use it if it's broken, but I'd like to use it
> when possible and not just generally disable it.  THere are a lot of 0.4e
> installs out there...

I would guess that everything older then yet-to-be-released 0.7 is broken.

If you can find a enum KEYTYPE_ARCFOUR_56 in krb5.h, heimdal is probably ok.

I've been thinking about adding a version number to krb5.h

Love

PGP signature