Love Hörnquist Åstrand 1a22071676 (init_tgs_req): make generation of subkey optional on configuration parameter ...

[realms]realm={tgs_require_subkey=bool}
defaults to off. The RFC1510 weakly defines the correct behavior,
so old DCE secd apparently required the subkey to be there, and MS will
use it when its there. But the request isn't encrypted in the subkey,
so you get to choose if you want to talk to a MS mdc or a old DCE secd.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@12550 ec53bebd-3082-4978-b11e-865c3cabbd6b

2003-08-16 16:25:14 +00:00

22 KiB

Raw Blame History

View Raw