[krbdev.mit.edu #6912] SVN Commit

[Tom Yu via RT]

pull up r24929 from trunk

 ------------------------------------------------------------------------
 r24929 | ghudson | 2011-05-14 10:49:00 -0400 (Sat, 14 May 2011) | 11 lines

 ticket: 6912
 subject: Use hmac-md5 checksum for PA-FOR-USER padata
 target_version: 1.9.2
 tags: pullup

 The MS-S4U documentation specifies that hmac-md5 be used for
 PA-FOR-USER checksums; we were using the mandatory checksum type for
 the key.  Although some other checksum types appear to be allowed by
 Active Directory KDCs, Richard Silverman reports that md5-des is not
 one of them, causing S4U2Self requests to fail for DES keys.

http://src.mit.edu/fisheye/changelog/krb5/?cs=24954
Commit By: tlyu
Revision: 24954
Changed Files:
U   branches/krb5-1-9/src/lib/krb5/krb/s4u_creds.c