On Thu, 2011-05-12 at 20:07 -0400, Richard Silverman wrote: > Using the supplied t_s4u.c test program, S4U2Self fails with > KRB5KRB_AP_ERR_MODIFIED (41). The TGS_REQ uses a checksum of type > CKSUMTYPE_RSA_MD5_DES(8) in the PA-S4U2SELF(129) field. However, if I > apply this patch to force CKSUMTYPE_CRC32(1) instead:
Would you mind testing again with the checksum type forced to CKSUMTYPE_HMAC_MD5_ARCFOUR? That's the checksum type documented here: http://msdn.microsoft.com/en-us/library/cc246089(v=PROT.13).aspx ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
