From 84bc108d8f794c476c5e3d1df788b728ee3beb79 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Sat, 16 Apr 2011 15:44:23 +1000 Subject: [PATCH] lib/krb5: Allow any kvno to match when searching the keytab. MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Windows does not use a KVNO when it checks it's passwords, and MIT doesn't check the KVNO when no acceptor identity is specified (looping over all keys in the keytab). Andrew Bartlett Signed-off-by: Stefan Metzmacher Signed-off-by: Love Hörnquist Åstrand --- lib/krb5/rd_req.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/lib/krb5/rd_req.c b/lib/krb5/rd_req.c index 6a656a8f7..21daeb596 100644 --- a/lib/krb5/rd_req.c +++ b/lib/krb5/rd_req.c @@ -985,8 +985,7 @@ krb5_rd_req_ctx(krb5_context context, goto out; } - if (entry.keyblock.keytype != ap_req.ticket.enc_part.etype || - (kvno && kvno != entry.vno)) { + if (entry.keyblock.keytype != ap_req.ticket.enc_part.etype) { krb5_kt_free_entry (context, &entry); continue; }