SOLVED: AFS keys not working in keytabs

["Brandon S. Allbery KF8NH" <allbery@kf8nh.apk.net>]

Some time ago I reported a problem where AFS keys imported into heimdal and
then exported into a keytab didn't appear to be usable.

First, for some reason kinit wasn't reporting that it couldn't find the key
in the keytab.  It is doing so now (and I can't figure out why, unless the
check for that error wasn't in 0.0t --- I was running 0.0u out of its build
directory but may well have forgotten to set my path appropriately...).

Anyway, the fix:

diff -ur heimdal-0.0u-dist/lib/krb5/keytab.c heimdal-0.0u/lib/krb5/keytab.c
--- heimdal-0.0u-dist/lib/krb5/keytab.c	Sat Jan 30 13:14:18 1999
+++ heimdal-0.0u/lib/krb5/keytab.c	Thu Feb 18 17:57:52 1999
@@ -198,7 +198,7 @@
 	return FALSE;
     if(vno && vno != entry->vno)
 	return FALSE;
-    if(keytype && keytype != entry->keyblock.keytype)
+    if(keytype && (keytype & KEYTYPE_KEYTYPE_MASK) != entry->keyblock.keytype)
 	return FALSE;
     return TRUE;
 }

-- 
brandon s. allbery	[os/2][linux][solaris][japh]	 allbery@kf8nh.apk.net
system administrator	     [WAY too many hats]	   allbery@ece.cmu.edu
carnegie mellon / electrical and computer engineering			 KF8NH
     We are Linux. Resistance is an indication that you missed the point.