I applied the patches to my clients, and still not working. Is there any way to test if the enconding has been placed correctly? Should I also apply the patch to the kdc? ________________________________________ From: Greg Hudson [[email protected]] Sent: 13 April 2012 16:55 To: Sebastian Galiano Cc: [email protected] Subject: Re: Kerberos, Windows2008 RODC and ticket forwarding Problem
On 04/13/2012 03:23 AM, Sebastian Galiano wrote: > Ok, the AS-REQ is only to initiate the authentication, that is why the not > forwarded one has that packet. Then > I really dont know why is giving the KRB5KRB_AP_ERR_BAD_INTEGRITY It's possible that we need to set the name type in more places, but I think it's more likely that the problem is related to the encoding of the kvno of the ticket. We have a fix (well, an interop workaround) scheduled for 1.9.4; you can see the diff here: https://github.com/krb5/krb5-anonsvn/commit/29a0a3b290ff1dfaf51ac9b7e10591998151ec22 ________________________________________________ Kerberos mailing list [email protected] https://mailman.mit.edu/mailman/listinfo/kerberos
