r21436: Choose the TGT session key enctype also by checking what enctypes
authorStefan Metzmacher <metze@samba.org>
Sun, 18 Feb 2007 23:27:42 +0000 (23:27 +0000)
committerGerald (Jerry) Carter <jerry@samba.org>
Wed, 10 Oct 2007 19:48:34 +0000 (14:48 -0500)
commit5cd79db03e143eaaa9b63a28d3f0824edb1295d2
treed2523193897c8de4fa3fe53cb06eceba5d5b73d6
parent760f438553d26488c529ef8c13aa7035b6f11dca
r21436: Choose the TGT session key enctype also by checking what enctypes
the krbtgt hdb entry provides.

We need to make sure other KDC's with the same hdb backend data
can accept the TGT. (w2k and w2k3 don't support aes256-cts-hmac-sha1-96 (18)
session keys.)

Love: I'm not sure if this is the correct way of doing it...

metze
(This used to be commit 5840f50d8954e95a7071a90a1c4dcce9ae05d77c)
source4/heimdal/kdc/kerberos5.c