RE: trouble with forwarded tgt from windows client

["Zi-Bin Yang" <zbyang@decru.com>]

Yes, that would work.  I was hoping for something, err, slightly more
elegant, but guess that's too much to ask for when having to make things
work with Windows. :)  Thanks!

Zi-Bin


-----Original Message-----
From: owner-heimdal-discuss@sics.se
[mailto:owner-heimdal-discuss@sics.se] On Behalf Of Love
Sent: Tuesday, November 18, 2003 12:34 PM
To: Zi-Bin Yang
Cc: heimdal-discuss@sics.se
Subject: Re: trouble with forwarded tgt from windows client



"Zi-Bin Yang" <zbyang@decru.com> writes:

> So has anyone run into this problem before?  Is my guess of the cause
> correct?  Any suggestion?  Thanks!

Yes, I've seen this before, is this what you want ?

Love

Index: mk_req_ext.c
===================================================================
RCS file:
/afs/pdc.kth.se/src/packages/kth-krb/SourceRepository/heimdal/lib/krb5/m
k_req_ext.c,v
retrieving revision 1.27
diff -u -u -w -r1.27 mk_req_ext.c
--- mk_req_ext.c	28 Jun 2003 21:05:12 -0000	1.27
+++ mk_req_ext.c	3 Nov 2003 21:08:50 -0000
@@ -110,6 +110,15 @@
 				     in_data->data,
 				     in_data->length,
 				     &c);
+      } else if(ac->keyblock->keytype == ETYPE_DES_CBC_MD5) {
+	  /* this is to make MS kdc happy */
+	  ret = krb5_create_checksum(context, 
+				     NULL,
+				     0,
+				     CKSUMTYPE_RSA_MD5,
+				     in_data->data,
+				     in_data->length,
+				     &c);
       } else if(ac->keyblock->keytype == ETYPE_ARCFOUR_HMAC_MD5) {
 	  /* this is to make MS kdc happy */ 
 	  ret = krb5_create_checksum(context,