Patch: System keytab usage improvements

Love lha at stacken.kth.se
Wed Jun 2 10:36:48 GMT 2004


Rakesh Patel <rapatel at optonline.net> writes:

> Dan, thanks for all your efforts. I will test the patch shortly
> and there are two others who have been utilizing the patch during
> this process and can assist in ensuring extensive testing of the code.
>
> I haven't had a chance to review the code, however the discussions
> with Andrew indicate we should be fine.
>
> My only comment would be that I have always seen the key version
> number start at 1 instead of 0 for MIT Kerberos v5 (since 1990).
> Guenther had originally set the value to 1 in the first version of the
> patch. I have not tested with Windows2000 - can anyone confirm the
> default key version used by Windows 2000?

Key version is optional in w2k (and that is perfectly fine wire protocol
wise). Where I've seen it 0 seems to be common choice.

Love

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 477 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20040602/ec6db912/attachment.bin


More information about the samba-technical mailing list