[krbdev.mit.edu #6622] kinit_fast fails if weak enctype is among client principal keys

Tom Yu via RT rt-comment at krbdev.mit.edu
Mon Jan 4 22:18:40 EST 2010


If the following patch is applied, make check in tests/dejagnu fails when attempting to test 
kinit with FAST enabled.

diff --git a/src/tests/dejagnu/config/default.exp b/src/tests/dejagnu/config/default.exp
index 8e540b3..3f20d30 100644
--- a/src/tests/dejagnu/config/default.exp
+++ b/src/tests/dejagnu/config/default.exp
@@ -177,7 +177,7 @@ set passes {
 	aes-only
 	mode=udp
 	des3_krbtgt=0
-	{supported_enctypes=aes256-cts-hmac-sha1-96:normal}
+	{supported_enctypes=aes256-cts-hmac-sha1-96:normal des-cbc-crc:normal}
 	{permitted_enctypes(kdc)=aes256-cts-hmac-sha1-96}
 	{permitted_enctypes(client)=aes256-cts-hmac-sha1-96}
 	{permitted_enctypes(server)=aes256-cts-hmac-sha1-96}




More information about the krb5-bugs mailing list