projects / krb5.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f1eb636) | patch
Use hmac-md5 checksum for PA-FOR-USER padata
authorGreg Hudson <ghudson@mit.edu>
Sat, 14 May 2011 14:49:00 +0000 (14:49 +0000)
committerGreg Hudson <ghudson@mit.edu>
Sat, 14 May 2011 14:49:00 +0000 (14:49 +0000)
commit582eacef47c1a9c9386bf588978125322ac6b970
tree717910aa882344c60e89c072f6b302eea17a4908tree | snapshot
parentf1eb636f8854d5a3f70137e4beeea34ca7382b85commit | diff
Use hmac-md5 checksum for PA-FOR-USER padata

The MS-S4U documentation specifies that hmac-md5 be used for
PA-FOR-USER checksums; we were using the mandatory checksum type for
the key.  Although some other checksum types appear to be allowed by
Active Directory KDCs, Richard Silverman reports that md5-des is not
one of them, causing S4U2Self requests to fail for DES keys.

ticket: 6912
target_version: 1.9.2
tags: pullup

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@24929 dc483132-0cff-0310-8789-dd5450dbe970
src/lib/krb5/krb/s4u_creds.c diff | blob | history
MIT implementation of the Kerberos network authentication protocol. This repo may be rebased, so don't base your work on it. Use git://github.com/krb5/krb5 instead.