Re: MIT AD Trust PAC handling

[Michael B Allen <miallen@ioplex.com>]

On Tue, 11 Dec 2007 22:21:48 -0000
"Markus Moeller" <huaraz@moeller.plus.com> wrote:

> I guess they need to change some realm details inside the PAC.

I don't think that's it. The PAC signatures don't require any intelligence
about the content.

I think it's more likely that the wrong algorithm is being used resulting
in a bad checksum key.

This is all wild speculation of course :-)

Mike

-- 
Michael B Allen
PHP Active Directory SPNEGO SSO
http://www.ioplex.com/