[33381] in Kerberos
Re: bug report: S4U2Self Solaris-10 -> Windows-2003 fails with
daemon@ATHENA.MIT.EDU (Greg Hudson)
Fri May 13 07:11:56 2011
From: Greg Hudson <ghudson@mit.edu>
To: Richard Silverman <res@qoxp.net>
In-Reply-To: <alpine.DEB.1.10.1105121947470.22892@seraph.oankali.net>
Date: Fri, 13 May 2011 07:11:44 -0400
Message-ID: <1305285104.2034.154.camel@t410>
Mime-Version: 1.0
Cc: MIT Kerberos <kerberos@mit.edu>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
On Thu, 2011-05-12 at 20:07 -0400, Richard Silverman wrote:
> Using the supplied t_s4u.c test program, S4U2Self fails with
> KRB5KRB_AP_ERR_MODIFIED (41). The TGS_REQ uses a checksum of type
> CKSUMTYPE_RSA_MD5_DES(8) in the PA-S4U2SELF(129) field. However, if I
> apply this patch to force CKSUMTYPE_CRC32(1) instead:
Would you mind testing again with the checksum type forced to
CKSUMTYPE_HMAC_MD5_ARCFOUR? That's the checksum type documented here:
http://msdn.microsoft.com/en-us/library/cc246089(v=PROT.13).aspx
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
