From 7f4b2465f9cf53eead82b8591b85554c0f9834b0 Mon Sep 17 00:00:00 2001 From: Assar Westerlund Date: Sat, 29 Nov 1997 06:16:16 +0000 Subject: [PATCH] (make_pa_tgs_req): added comment git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@4072 ec53bebd-3082-4978-b11e-865c3cabbd6b --- lib/krb5/get_cred.c | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/lib/krb5/get_cred.c b/lib/krb5/get_cred.c index 184b28d17..fe09a1d81 100644 --- a/lib/krb5/get_cred.c +++ b/lib/krb5/get_cred.c @@ -68,7 +68,13 @@ make_pa_tgs_req(krb5_context context, krb5_auth_con_free(context, ac); return ret; } - if(ticket.enc_part.etype == ETYPE_DES_CBC_CRC){ + /* + * If we get a ticket encrypted with DES-CBC-CRC, it's + * probably an old DCE secd and then the usual heuristics of + * using the best algorithm (in this case RSA-MD5 and + * DES-CBC-MD5) will not work. + */ + if(ticket.enc_part.etype == ETYPE_DES_CBC_CRC) { krb5_auth_setcksumtype(context, ac, CKSUMTYPE_RSA_MD4); krb5_auth_setenctype(context, ac, ETYPE_DES_CBC_CRC); } -- 2.11.4.GIT