Marcus Watts wrote: > I was hoping you would try different salt types on the principal itself > (while leaving the enctype as des-cbc-crc). Still, you appear to have > 2 of 3 necessary conditions to manifest the bug described here: > http://mailman.mit.edu/pipermail/krb5-bugs/2006-February/004246.html > in which case, this patch applied to the kdc may fix it: > http://www.umich.edu/~mdw/krb5143-kdcetype.diff > > I don't think you ever said what version of kerberos you had installed > on your server, so I don't know how much trouble you'll have patching that. > This patch was developed against MIT 1.4.3, but substantially the same > code (and presumably the same behavior) was still there as of 1.6.1.
Indeed, it still seems to be a problem. We're running 1.6.3. I'll check out the patch and see where that gets me. Thanks! ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
