Explicitly setting KVNO during ank...

[Greg Hudson]

On 11/08/2011 01:14 AM, Bob Liu wrote:
> Is it even possible to explicitly set the "kvno" to "0" zero like the following?

MIT krb5 historically uses 0 as a distinguished kvno value (typically
meaning "not set" or "unknown"), so when you try to set the initial kvno
to 0, it winds up being the default of 1.

People set up cross-realm trust between MIT and AD realms all the time;
I think they just ignore the kvno mismatch and it works anyway.