diff options
author | Greg Hudson <ghudson@mit.edu> | 2011-05-14 14:49:00 +0000 |
---|---|---|
committer | Greg Hudson <ghudson@mit.edu> | 2011-05-14 14:49:00 +0000 |
commit | 582eacef47c1a9c9386bf588978125322ac6b970 (patch) | |
tree | 717910aa882344c60e89c072f6b302eea17a4908 /src/util/support/errors.c | |
parent | f1eb636f8854d5a3f70137e4beeea34ca7382b85 (diff) | |
download | krb5-582eacef47c1a9c9386bf588978125322ac6b970.tar.gz krb5-582eacef47c1a9c9386bf588978125322ac6b970.tar.xz krb5-582eacef47c1a9c9386bf588978125322ac6b970.zip |
Use hmac-md5 checksum for PA-FOR-USER padata
The MS-S4U documentation specifies that hmac-md5 be used for
PA-FOR-USER checksums; we were using the mandatory checksum type for
the key. Although some other checksum types appear to be allowed by
Active Directory KDCs, Richard Silverman reports that md5-des is not
one of them, causing S4U2Self requests to fail for DES keys.
ticket: 6912
target_version: 1.9.2
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24929 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/util/support/errors.c')
0 files changed, 0 insertions, 0 deletions