[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: kinit.c patch

joda@pdc.kth.se (Johan Danielsson) writes:
> Modern MIT krb524d seem to require des-cbc-crc, for unknown reasons. I
> think older version were happy with any des key.

I cannot think of any possible reason why it would care.  We could fix
this by:

1. Getting that limitation from the MIT krb524d removed.
2. Always send des-cbc-crc tickets for doing the 524 translation
3. Adding another configuration option for specifying that.

I would prefer (1) and (3) as an interim solution.