[7978] in Kerberos
Re: kpasswd problem
daemon@ATHENA.MIT.EDU (Mark Eichin)
Mon Sep 16 14:54:31 1996
To: kerberos@MIT.EDU
Date: 16 Sep 1996 13:47:26 -0400
From: Mark Eichin <eichin@cygnus.com>
You might try this patch -- we fixed this back in April but it looks
like it didn't get back in to the MIT tree. However, Ken's right in
noting that there's very little reason to list des:afs3, since there
isn't a mechanism to migrate to a KAserver database (and the mechanism
for migrating from it is somewhat cumbersome.) You only need to have
at least one single-des type for krb524init to work, and that's enough
for aklog to work...
--- mit5/lib/kdb/kdb_cpw.c Mon Sep 9 03:20:09 1996
+++ krb5/lib/kdb/kdb_cpw.c Sun Sep 1 18:34:06 1996
@@ -397,7 +397,7 @@ add_key_pwd(context, master_eblock, ks_t
return(retval);
key_salt.data = *saltdata;
- /* key_salt.data.length = -1; *//*length actually used below...*/
+ key_salt.data.length = -1; /*length actually used below...*/
krb5_xfree(saltdata);
}
break;
@@ -410,6 +410,11 @@ add_key_pwd(context, master_eblock, ks_t
if (retval = krb5_string_to_key(context, &key_eblock, &key, &pwd,
&key_salt.data))
return(retval);
+
+ if (key_salt.data.length == -1)
+ key_salt.data.length =
+ krb5_princ_realm(context, db_entry->princ)->length;
+
if (retval = krb5_dbekd_encrypt_key_data(context, master_eblock, &key,
(const krb5_keysalt *)&key_salt,
