Re: [cifs-protocol] Confirm kerberos key selection rules for PAC KDC signature

2012-01-26 Thread Edgar Olougouna
Andrew, Regarding your observation on “MS-KILE 3.3.5.3.2.3 Server Signature”: We confirm that the document is correct. The statement: “the strongest cryptography that the domain supports” is related to the SignatureType of the checksum instead of the server account key. Based on this

Re: [cifs-protocol] Confirm kerberos key selection rules for PAC KDC signature

2012-01-26 Thread Andrew Bartlett
On Thu, 2012-01-26 at 19:10 +, Edgar Olougouna wrote: Andrew, Regarding your observation on “MS-KILE 3.3.5.3.2.3 Server Signature”: We confirm that the document is correct. The statement: “the strongest cryptography that the domain supports” is related to the SignatureType of