Hi,
Okay, this time, I've only tried the subkey-removal
"parameter".
For subkey-removal I used the appended patch (slightly cut
down version of Simon's version).
Base result: This makes w2k3 like us!
Other parameters:
shishi version: 0.0.25
cipher: arcfour-hmac
checksum: hmac-md5 from arcfour-hmac
preauth: enabled
Other patches/modifications: None.
heimdal-kdc:
with and without subkey: works.
w2k3-kdc:
with subkey: Gives the old known
"Message stream modified" from the kdc.
without subkey: Works
See my first conclusions in the next mail.
Elrond
--- shishi-0.0.25.orig/lib/tgs.c
+++ shishi-0.0.25/lib/tgs.c
@@ -83,6 +83,10 @@
if (res != SHISHI_OK)
return res;
+ res = shishi_authenticator_remove_subkey(handle, shishi_ap_authenticator
(ltgs->ap));
+ if (res != SHISHI_OK)
+ return res;
+
res = shishi_tkt (handle, <gs->tkt);
if (res != SHISHI_OK)
return res;
_______________________________________________
Help-shishi mailing list
[email protected]
http://lists.gnu.org/mailman/listinfo/help-shishi
