[krbdev.mit.edu #6912] SVN Commit

[Greg Hudson via RT]

The MS-S4U documentation specifies that hmac-md5 be used for
PA-FOR-USER checksums; we were using the mandatory checksum type for
the key.  Although some other checksum types appear to be allowed by
Active Directory KDCs, Richard Silverman reports that md5-des is not
one of them, causing S4U2Self requests to fail for DES keys.


http://src.mit.edu/fisheye/changelog/krb5/?cs=24929
Commit By: ghudson
Revision: 24929
Changed Files:
U   trunk/src/lib/krb5/krb/s4u_creds.c