another similar enctype issue

Nicolas Williams Nicolas.Williams at
Fri Sep 30 15:22:18 EDT 2005

On Fri, Sep 30, 2005 at 01:24:25PM -0400, Sam Hartman wrote:
> etype_info_helper

Exactly, if the principal has a long-term key of one enctype that has
similar enctypes, then the KDC ought to offer all of them for pre-auth
modulo realm policy.  And the code is there for that, so if Will is
seeing failures that indicate that the KDC is not offering des-cbc-crc,
then maybe we have a bug.

> My concern is not what happens to the session key, but what happens to
> the reply key.

Me too.


More information about the krbdev mailing list