MIT Kerberos 5 v1.9.1 krb5_set_password_using_ccache() fails with Windows 2003 R2

Greg Hudson ghudson at MIT.EDU
Mon Nov 14 11:49:23 EST 2011


On 11/14/2011 08:04 AM, Mark R Bannister wrote:
> As I indicated at the start of this thread, if kdc option bit 15 (canonicalize)
> is cleared everything works fine, as demonstrated using Kerberos libraries v1.4.4
> on Solaris 10 (and v1.6.1 on RHEL 5.5).

I would expect 1.6.1 to send the TGS request with the canonicalize bit
set.  Can you look at the packet trace for 1.6.1 (or post results if
you've already looked at it)?  Perhaps there's a difference there which
will explain the different outcome.





More information about the Kerberos mailing list