From 1f147f0fa66427c1976d5f88eb8bcdfe5f213287 Mon Sep 17 00:00:00 2001 From: Nicolas Williams Date: Sat, 27 Jul 2013 16:51:01 -0500 Subject: [PATCH] Check all three DES types --- kdc/kerberos5.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/kdc/kerberos5.c b/kdc/kerberos5.c index 58eb9c43f..92b487697 100644 --- a/kdc/kerberos5.c +++ b/kdc/kerberos5.c @@ -170,7 +170,9 @@ _kdc_find_etype(krb5_context context, krb5_boolean use_strongest_session_key, if (krb5_enctype_valid(context, etypes[k]) != 0 && !_kdc_is_weak_exception(princ->entry.principal, etypes[k])) continue; - if (etypes[k] == ETYPE_DES_CBC_CRC) + if (etypes[k] == (krb5_enctype)ETYPE_DES_CBC_CRC || + etypes[k] == (krb5_enctype)ETYPE_DES_CBC_MD4 || + etypes[k] == (krb5_enctype)ETYPE_DES_CBC_MD5) client_offered_1des = 1; if (p[i] != etypes[k]) continue;