another similar enctype issue
Nicolas.Williams at sun.com
Fri Sep 30 15:22:18 EDT 2005
On Fri, Sep 30, 2005 at 01:24:25PM -0400, Sam Hartman wrote:
Exactly, if the principal has a long-term key of one enctype that has
similar enctypes, then the KDC ought to offer all of them for pre-auth
modulo realm policy. And the code is there for that, so if Will is
seeing failures that indicate that the KDC is not offering des-cbc-crc,
then maybe we have a bug.
> My concern is not what happens to the session key, but what happens to
> the reply key.
More information about the krbdev