Combined DES salt and Keytab cleanup patch

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Love Hörnquist Åstrand wrote:
> Jerry,
> 
>> I think this is probably helpful:
>> http://mailman.mit.edu/pipermail/kerberos/2005-July/008167.html
> 
> Sure, if do like microsoft see to do it, you can't 
> use keytabs.
>
> If you use keytabs you have do case insensitive 
> matching, how microsoft do that in their kdc I don't
> know, but I would assume ldap stringprep or something
> like that.

I agree.  it's horrible,  But it's the world we live in.
We can probably do a better job though.  I'm still working
on more cleanups.

I'm wondering if the name is always canoncalized by the
AD KDC based on the matching SPN.



cheers, jerry
=====================================================================
Samba                                    ------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFEtnuTIR7qMdg1EfYRAvhVAJ9aZiFD5qkBPAX2bUc3i0XgkHGTQgCfYulb
hKjNe5XQfteQ5xaZXhacfgs=
=3vCe
-----END PGP SIGNATURE-----