[krbdev.mit.edu #6490] [Russ Allbery] Bug#528729: libkrb5-3: cannot obtain cross-realm tickets with Windows 2003 AD

[Greg Hudson via RT]

A correction, for posterity:

RFC 4120 does actually specify the key to be used for ap-req checksums,
including for TGS reqs, in the list of key usages (7.5.1), and I missed
that on my reading.  (It should probably also be specified in the text,
but it's there.)