[krbdev.mit.edu #6622] kinit_fast fails if weak enctype is among client principal keys
Tom Yu via RT
rt-comment at krbdev.mit.edu
Mon Jan 4 22:18:40 EST 2010
If the following patch is applied, make check in tests/dejagnu fails when attempting to test
kinit with FAST enabled.
diff --git a/src/tests/dejagnu/config/default.exp b/src/tests/dejagnu/config/default.exp
index 8e540b3..3f20d30 100644
--- a/src/tests/dejagnu/config/default.exp
+++ b/src/tests/dejagnu/config/default.exp
@@ -177,7 +177,7 @@ set passes {
aes-only
mode=udp
des3_krbtgt=0
- {supported_enctypes=aes256-cts-hmac-sha1-96:normal}
+ {supported_enctypes=aes256-cts-hmac-sha1-96:normal des-cbc-crc:normal}
{permitted_enctypes(kdc)=aes256-cts-hmac-sha1-96}
{permitted_enctypes(client)=aes256-cts-hmac-sha1-96}
{permitted_enctypes(server)=aes256-cts-hmac-sha1-96}
More information about the krb5-bugs
mailing list