If there is no DES key with a V4 salttype, simply return any DES key.

(Service keys only need to be DES for V4 requests to work.)

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@7355 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/kdc/kerberos_v4.c b/src/kdc/kerberos_v4.c
index 6308d65113f25189c0760a70c1debd722a6477cf..7d0508f2124b51c41b428c0293fc97a649768aa1 100644 (file)
--- a/src/kdc/kerberos_v4.c
+++ b/src/kdc/kerberos_v4.c
@@ -392,7 +392,14 @@ kerb_get_principal(name, inst, principal, maxn, more)
                               ENCTYPE_DES_CBC_CRC,
                               KRB5_KDB_SALTTYPE_V4,
                               -1,
-                              &pkey)) {
+                              &pkey) &&
+       krb5_dbe_find_enctype(kdc_context,
+                              &entries,
+                              ENCTYPE_DES_CBC_CRC,
+                              -1,
+                              -1,
+                              &pkey))
+    {
        lt = klog(L_KRB_PERR, "KDC V4: principal %s.%s isn't V4 compatible",
                  name, inst);
        krb5_db_free_principal(kdc_context, &entries, nprinc);