gss_krb5_import_cred fails for Samba

[Andrew Bartlett]

On Fri, 2011-07-22 at 23:43 -0500, Nico Williams wrote:
> Oh, I see.  Speaking of match by key (where I assume you mean by
> {enctype, kvno}), Heimdal does it.

Yes, and when we compile Samba3 against Heimdal it works well, using
this API.  

The trouble all started when our autoconf tests started finding this in
MIT, but with differences in behaviour.  

We additionally have a patch to have Heimdal use only enctype, because
Samba3 use 0 and -1 as the kvno values (yes really!), as it does not
record the kvno during the join.  

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org