bug report: S4U2Self Solaris-10 -> Windows-2003 fails with CKSUMTYPE_RSA_MD5_DES(8) checksum

Greg Hudson ghudson at MIT.EDU
Fri May 13 07:11:44 EDT 2011


On Thu, 2011-05-12 at 20:07 -0400, Richard Silverman wrote:
> Using the supplied t_s4u.c test program, S4U2Self fails with
> KRB5KRB_AP_ERR_MODIFIED (41).  The TGS_REQ uses a checksum of type
> CKSUMTYPE_RSA_MD5_DES(8) in the PA-S4U2SELF(129) field.  However, if I
> apply this patch to force CKSUMTYPE_CRC32(1) instead:

Would you mind testing again with the checksum type forced to
CKSUMTYPE_HMAC_MD5_ARCFOUR?  That's the checksum type documented here:

http://msdn.microsoft.com/en-us/library/cc246089(v=PROT.13).aspx





More information about the Kerberos mailing list