The patch applies cleanly to 1.6.3 and solves the problem. Old 1.2.7 kinit as provided with RHELv3 works fine now.
Marcus Watts wrote: > I was hoping you would try different salt types on the principal itself > (while leaving the enctype as des-cbc-crc). Still, you appear to have > 2 of 3 necessary conditions to manifest the bug described here: > http://mailman.mit.edu/pipermail/krb5-bugs/2006-February/004246.html > in which case, this patch applied to the kdc may fix it: > http://www.umich.edu/~mdw/krb5143-kdcetype.diff > > I don't think you ever said what version of kerberos you had installed > on your server, so I don't know how much trouble you'll have patching that. > This patch was developed against MIT 1.4.3, but substantially the same > code (and presumably the same behavior) was still there as of 1.6.1. > > -Marcus Watts > ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
