Patch: System keytab usage improvements

Love lha at
Wed Jun 2 10:36:48 GMT 2004

Rakesh Patel <rapatel at> writes:

> Dan, thanks for all your efforts. I will test the patch shortly
> and there are two others who have been utilizing the patch during
> this process and can assist in ensuring extensive testing of the code.
> I haven't had a chance to review the code, however the discussions
> with Andrew indicate we should be fine.
> My only comment would be that I have always seen the key version
> number start at 1 instead of 0 for MIT Kerberos v5 (since 1990).
> Guenther had originally set the value to 1 in the first version of the
> patch. I have not tested with Windows2000 - can anyone confirm the
> default key version used by Windows 2000?

Key version is optional in w2k (and that is perfectly fine wire protocol
wise). Where I've seen it 0 seems to be common choice.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 477 bytes
Desc: not available
Url :

More information about the samba-technical mailing list