[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: preauth requires DES3 keys???

"Brandon S. Allbery KF8NH" <allbery@kf8nh.apk.net> writes:
> The notable thing is that the only enctype searched for is des3-cbc-sha1.
> This is something of a problem given that the current KDC database is
> composed entirely of keys extracted from the kaserver.DB0 for the
> test5.ece.cmu.edu cell... no way to stuff des3 keys in there.  Shouldn't
> there be some provision to fall back to other enctypes?

I think this is caused by lib/krb5/get_in_tkt.c:init_as_req() just
trying the first etype.