diff options
Diffstat (limited to 'src/lib')
| -rw-r--r-- | src/lib/krb5/krb/ChangeLog | 7 | ||||
| -rw-r--r-- | src/lib/krb5/krb/send_tgs.c | 4 |
2 files changed, 9 insertions, 2 deletions
diff --git a/src/lib/krb5/krb/ChangeLog b/src/lib/krb5/krb/ChangeLog index 57906865a..32bdb2bdd 100644 --- a/src/lib/krb5/krb/ChangeLog +++ b/src/lib/krb5/krb/ChangeLog @@ -1,3 +1,10 @@ +Sun Mar 24 01:34:14 1996 Sam Hartman <hartmans@tertius.mit.edu> + + * send_tgs.c (krb5_send_tgs_basic): You want to setup the eblock + used for the authenticator using the in_cred->keyblock, *not* + request.ticket.enc_part.enctype. Under a multi-enctype system, + the session key may be different from the ticket key. + Wed Mar 20 23:00:59 1996 Theodore Y. Ts'o <tytso@dcl> * walk_rtree.c (krb5_walk_realm_tree): Fix 16bit vs. 32bit error. diff --git a/src/lib/krb5/krb/send_tgs.c b/src/lib/krb5/krb/send_tgs.c index def5db1e2..16f00c095 100644 --- a/src/lib/krb5/krb/send_tgs.c +++ b/src/lib/krb5/krb/send_tgs.c @@ -104,8 +104,8 @@ krb5_send_tgs_basic(context, in_data, in_cred, outbuf) goto cleanup_data; /* put together an eblock for this encryption */ - krb5_use_enctype(context, &eblock, request.ticket->enc_part.enctype); - request.authenticator.enctype = request.ticket->enc_part.enctype; + krb5_use_enctype(context, &eblock, in_cred->keyblock.enctype); + request.authenticator.enctype = in_cred->keyblock.enctype; request.authenticator.ciphertext.length = krb5_encrypt_size(scratch->length, eblock.crypto_entry); |