gss_krb5_import_cred fails for Samba

Andrew Bartlett abartlet at
Fri Jul 22 23:55:04 MDT 2011

On Fri, 2011-07-22 at 23:43 -0500, Nico Williams wrote:
> Oh, I see.  Speaking of match by key (where I assume you mean by
> {enctype, kvno}), Heimdal does it.

Yes, and when we compile Samba3 against Heimdal it works well, using
this API.  

The trouble all started when our autoconf tests started finding this in
MIT, but with differences in behaviour.  

We additionally have a patch to have Heimdal use only enctype, because
Samba3 use 0 and -1 as the kvno values (yes really!), as it does not
record the kvno during the join.  

Andrew Bartlett

Andrew Bartlett                      
Authentication Developer, Samba Team 

More information about the samba-technical mailing list