another similar enctype issue

[Nicolas Williams]

On Fri, Sep 30, 2005 at 01:24:25PM -0400, Sam Hartman wrote:
> etype_info_helper

Exactly, if the principal has a long-term key of one enctype that has
similar enctypes, then the KDC ought to offer all of them for pre-auth
modulo realm policy.  And the code is there for that, so if Will is
seeing failures that indicate that the KDC is not offering des-cbc-crc,
then maybe we have a bug.

> My concern is not what happens to the session key, but what happens to
> the reply key.

Me too.

Nico
--