On Fri, 13 May 2011, Greg Hudson wrote:

> On Thu, 2011-05-12 at 20:07 -0400, Richard Silverman wrote:
>> Using the supplied t_s4u.c test program, S4U2Self fails with
>> KRB5KRB_AP_ERR_MODIFIED (41).  The TGS_REQ uses a checksum of type
>> CKSUMTYPE_RSA_MD5_DES(8) in the PA-S4U2SELF(129) field.  However, if I
>> apply this patch to force CKSUMTYPE_CRC32(1) instead:
>
> Would you mind testing again with the checksum type forced to
> CKSUMTYPE_HMAC_MD5_ARCFOUR?

Done; that works also.

- Richard
________________________________________________
Kerberos mailing list           [email protected]
https://mailman.mit.edu/mailman/listinfo/kerberos

Reply via email to