[16297] in Kerberos_V5_Development
Re: wrong checksum type for arcfour-hmac-md5
daemon@ATHENA.MIT.EDU (Greg Hudson)
Wed Sep 15 12:27:25 2010
From: Greg Hudson <ghudson@mit.edu>
To: Luke Howard <lhoward@mit.edu>
In-Reply-To: <8CB4F3DE-38DE-4737-994F-B4A3D8DC06B8@mit.edu>
Date: Wed, 15 Sep 2010 12:27:19 -0400
Message-ID: <1284568040.5992.1668.camel@ray>
Mime-Version: 1.0
Cc: "krbdev@mit.edu Dev List" <krbdev@mit.edu>,
Nicolas Williams <nicolas.williams@oracle.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krbdev-bounces@mit.edu
On Wed, 2010-09-15 at 12:15 -0400, Luke Howard wrote:
> The trace simo attached showed unkeyed checksum in a tgs req, IIRC
Yes, but that's not directly to the failure case. We have no reason to
believe that a tgs-req with an hmac-md5 authenticator checksum will be
rejected by AD.
_______________________________________________
krbdev mailing list krbdev@mit.edu
https://mailman.mit.edu/mailman/listinfo/krbdev
