kadm5_decrypt_key(). This patch prevents the returned keyblock's enctype from being coerced to the requested 'ktype' if the requested 'ktype' == -1. A ktype of -1 is documented as meaning "to be ignored". Commit By: jaltman Revision: 20558 Changed Files: U trunk/src/lib/kadm5/srv/svr_principal.c