Based on Apple's patch, during the referrals loop, check to see if the session key enctype of a returned credential for the final service is among the enctypes explicitly selected by the application, and retry with old_use_conf_ktypes if it is not. Commit By: tlyu Revision: 19748 Changed Files: _U trunk/ U trunk/src/lib/krb5/krb/gc_frm_kdc.c