password incorrect but it's not, works fine with Solaris + MIT?

[Jeff Blaine]

The patch applies cleanly to 1.6.3 and solves the problem.

Old 1.2.7 kinit as provided with RHELv3 works fine now.

Marcus Watts wrote:
> I was hoping you would try different salt types on the principal itself
> (while leaving the enctype as des-cbc-crc).  Still, you appear to have
> 2 of 3 necessary conditions to manifest the bug described here:
> 	http://mailman.mit.edu/pipermail/krb5-bugs/2006-February/004246.html
> in which case, this patch applied to the kdc may fix it:
> 	http://www.umich.edu/~mdw/krb5143-kdcetype.diff
> 
> I don't think you ever said what version of kerberos you had installed
> on your server, so I don't know how much trouble you'll have patching that.
> This patch was developed against MIT 1.4.3, but substantially the same
> code (and presumably the same behavior) was still there as of 1.6.1.
> 
> 				-Marcus Watts
>