Combined DES salt and Keytab cleanup patch

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Andrew Bartlett wrote:

>>> * Figure the DES salt based on the domain functional level
>>>   and UPN (if present and applicable)
>>> * Only deal with the DES-CBC-MD5, DES-CBC-CRC, and RC4-HMAC
>>>   keys
> 
> Why not just deal with the key as presented?  We have:
> 
> smb_krb5_get_keyinfo_from_ap_req(), which returns the enc 
> type of the incoming ticket.

Hmmm...Did you read the patch ?  The point was to limit
the keys in the keytab to enctypes support by AD.
Not ticket decryption.






cheers, jerry
=====================================================================
Samba                                    ------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFEtvSnIR7qMdg1EfYRAgycAJ9hAlUpKZPRWVzBhpaOe3MyZMDSdQCfd7Vp
VJhkOuRRAFpsLcD35XBLncI=
=gQnx
-----END PGP SIGNATURE-----